4 ms·
Why was that flagged as a security risk?
by foota 6y ago
Why was that flagged as a security risk?
- faeyanpiraat 6y agoIt might have been software managing sensitive information, and you can leak data that way
- himinlomax 6y agoIt allows xhr.open, just not with a string literal, so that's not the issue.
- acemarke 6y agoHonestly, I can't remember at this point. It had something to do with the use of AJAX overall, and a GET request via XHR specifically, but this was many years ago and I don't know what the specific finding description was.