5 ms·

Oh great - so non-deterministic behaviour adopted by the browser from instructions elsewhere. That's not good. Bring on the exploits! Good job I've got a low

Oh great - so non-deterministic behaviour adopted by the browser from instructions elsewhere. That's not good. Bring on the exploits! Good job I've got a low IQ and use IE9 :)

andfarm 15y ago
I don't think it's actually any more powerful in that regard than, say, <iframe> tags. If your application lets users perform destructive actions with a GET request, you were already vulnerable.
- pointyhat 15y ago
  This is true, but look at the state of most applications out there.