4 ms·
> We’re grabbing the browser session data Correct me if I’m wrong but this is disallowed by many end sites eg Google and circumvents oauth/any real security. I
by cuuupid 4y ago
> We’re grabbing the browser session data
Correct me if I’m wrong but this is disallowed by many end sites eg Google and circumvents oauth/any real security. If your very new business was hacked in any way you’d be solely on the hook for the massive damage a bad party could do with such an elevated session with no real boundaries.
Cool idea, but I fail to see how this is 1) legal under many ToS’s and 2) not just a dangerous XSS attack waiting to happen.