5 ms·

loading the website from referral data in a frame might not be too smart... I could poison those referral headers with some exploit loolkit and boom, you expos

by NKCSS 7y ago

loading the website from referral data in a frame might not be too smart... I could poison those referral headers with some exploit loolkit and boom, you expose your users to a lot of BS... Example: https://simpleanalytics.com/simpleanalytics.com/referrers/fastcompany.com https://simpleanalytics.com/simpleanalytics.com/referrers/fa...

XCSme 7y ago
What do you mean? That's a screenshot of the site, not an iframe. Could you further explain how this could be exploited?
AdriaanvRossum 7y ago
We did build a screenshot app for this: https://github.com/simpleanalytics/screenshot-grabber https://github.com/simpleanalytics/screenshot-grabber
- NKCSS 7y ago
  My bad, I did not catch that (should have probably checked before posting that. At least that's a lot less dangerous; now people at least have to click on it. Sorry for jumping to that first conclusion.
  - AdriaanvRossum 7y ago
    No worries!