2 ms·
it's possible. iff the target sites are stupid enough by not doing proper input validation and/or origin check.
by geovedi 16y ago
it's possible. iff the target sites are stupid enough by not doing proper input validation and/or origin check.
- sdsdfvsdf 16y agoWhat is meant by "target" sites? Do you mean a site that uses a third party authentication? If we need every website out there to code security checks for these third party systems, I doubt we can rely on that
- EGreg 16y agoSo how do these third party authentication systems protect against this pretty straightforward javascript way of circumventing the authentication? Anyone know?