4 ms·
> Is putting scripts in a phone number field (or any input field) a well known way to hijack requests? 100% yes. It's called an XSS vulnerability. It was no 1
by rjmunro 5y ago
> Is putting scripts in a phone number field (or any input field) a well known way to hijack requests?
100% yes. It's called an XSS vulnerability. It was no 1 in the Open Web Application Security Project (OWASP) Top Ten 2017, although now that sites don't make this mistake very often, it's fallen to number 3 in the 2021 list.
> ... wide-spread across the entire iOS and mac OS code-base
It's not in the iOS or mac OS code-base, it's in the Apple website codebase. It could well be widespread there.