3 ms·
Runs? You mean doesn't block?
by oliwarner 8y ago
Runs? You mean doesn't block?
- howiroll 8y agoYeah. I was wrong but if mime was set as "text/html;/json" full JS pwnage was possible. https://gist.github.com/x0rz/8198e8e22b1f70fddb9c815c1232b795 https://gist.github.com/x0rz/8198e8e22b1f70fddb9c815c1232b79...