5 ms·
Sounds to me like the view-source running something from the page could possibly be used a domain-escaping bug. Just a gut feeling though.
by Flow 15y ago
Sounds to me like the view-source running something from the page could possibly be used a domain-escaping bug. Just a gut feeling though.
- JonnieCache 15y agoPulling it with curl shows there are no scripts in the page. Even if I use a chrome UA header. Curious. No funny response headers either.