4 ms·
There is probably a long winded explanation somewhere how this is actually a feature and not an exploit.
by AJ007 7y ago
There is probably a long winded explanation somewhere how this is actually a feature and not an exploit.
- chrismorgan 7y agoWell, how are you going to fix it without removing important features like submitting pages to the index? There are no perfect XSS auditors; you can fairly consistently work around Chrome’s, which is why they’re giving up on it now. I don’t see any realistic solution to this problem.
- londons_explore 7y agoI can imagine the search teams response now... "If your site has an XSS, then anyone can make any content appear on that domain... So why's it so bad if anyone can also make anything appear on the domain in Google Search? - we're just reflecting reality. Next you guys will report that you wrote a comment in hackernews and that appeared on google search too!"