4 ms·
> You can redirect people to porn sites without JS too by the way; via a HTTP header or a meta tag. If they can inject JS they can probably also inject one of t
by brigandish 3y ago
> You can redirect people to porn sites without JS too by the way; via a HTTP header or a meta tag. If they can inject JS they can probably also inject one of those. Don't think you can really blame JS as such for that kind of stuff.
How? Genuinely interested to know how this attack happens without a click from the user.
- wildpeaks 3y agoUsing HTTP status 301/302 or HTML meta tag http-equiv="refresh". See https://en.wikipedia.org/wiki/HTTP_302 https://en.wikipedia.org/wiki/HTTP_302 and https://developer.mozilla.org/en-US/docs/Web/HTML/Element/meta#http-equiv https://developer.mozilla.org/en-US/docs/Web/HTML/Element/me...
- brigandish 3y agoThat only happens on first load, how is that equivalent to Javascript?