4 ms·
Interesting! I recently found that Googlebot was susceptible to XSS [1], but it was mitigated by the recent updates (they updated Googlebot from Chrome 41 to th
by TomAnthony 7y ago
Interesting! I recently found that Googlebot was susceptible to XSS [1], but it was mitigated by the recent updates (they updated Googlebot from Chrome 41 to the most recent version).
I guess a lot will depend on the new Trusted Types API. If it is opt-in then I imagine there will be period whilst it is adopted - what happens during this time?
[1] https://www.tomanthony.co.uk/blog/xss-attacks-googlebot-index-manipulation/ https://www.tomanthony.co.uk/blog/xss-attacks-googlebot-inde...
- lol768 7y agoNice write-up! It's a shame that your report wasn't handled with the usual prompt response & fix.