3 ms·
I notice that this infinite scroll technique uses some sort of Javascript technique to update the contents of the address bar without redirecting the user to an
by qntm 15y ago
I notice that this infinite scroll technique uses some sort of Javascript technique to update the contents of the address bar without redirecting the user to another page.
Isn't that a massive, cataclysmic security risk?
- qntm 15y agoIn answer to my own question, it seems that you can't modify the hostname using this method, only the query.
- X-Istence 15y agoIt's using pushState which is part of the HTML 5 spec ...
- qntm 15y agoI was thinking of the possibility of phishing by starting with a fake site and altering the URL to that of, e.g., a bank. But anyway, it seems not to be an issue.