3 ms·
RequestPolicy users should be safe from this attack. The attacker can inject arbitrary javascript into a http page, but RequestPolicy will by default block that
by mike-cardwell 15y ago
RequestPolicy users should be safe from this attack. The attacker can inject arbitrary javascript into a http page, but RequestPolicy will by default block that javascript from causing any cross site requests to the target https site.
- Lennie 15y agoIt won't the JavaScript does not have to load from an external domain. If you can inject JavaScript-code in the HTML you are just as screwed.