4 ms·

it's http interception so no, I doubt javascript matters at all

• lucb1e 3y ago
  Without knowing more, that's a bit of an assumption. The vulnerability could be in image decoding, in which case an <img> tag is enough and no scripting is needed, but it could also very well require doing something funky with JavaScript.
  • bananapub 3y ago
    if it required javascript then it was already an exploit without the mitm