4 ms·
The method for the BA hack was not from javascript hosted externally. See https://medium.com/asecuritysite-when-bob-met-alice/the-british-airways-hack-javascr
by leonk 8y ago
The method for the BA hack was not from javascript hosted externally.
See https://medium.com/asecuritysite-when-bob-met-alice/the-british-airways-hack-javascript-weakness-pin-pointed-through-time-lining-dd0c2dbc7b50 https://medium.com/asecuritysite-when-bob-met-alice/the-brit...
- deleted 8y ago[deleted]
- strictnein 8y agoYep, was going to say exactly this. All the SRI, CSP, etc is great, but if you can't control your own site you're screwed regardless.