3 ms·
It's not the ability to display alerts that is concerning, but rather, the ability to run untrusted Javascript. This was a proof of concept that showed that it
by mynameismon 5y ago
It's not the ability to display alerts that is concerning, but rather, the ability to run untrusted Javascript. This was a proof of concept that showed that it has a serious XSS vulnerability
- seedie 5y agoFor detailed information on what XSS is, how it can be exploited and prevented have a look at the OWASP XSS description https://owasp.org/www-community/attacks/xss https://owasp.org/www-community/attacks/xss