3 ms·
Even then, that would be a vulnerability in the browser. JavaScript in ads is loaded in its own context and doesn't have permission to access things outside of
by hn_throwaway_99 3y ago
Even then, that would be a vulnerability in the browser. JavaScript in ads is loaded in its own context and doesn't have permission to access things outside of that context.
- beebeepka 3y agoThat would depend on how the ad is being served, no?
- hn_throwaway_99 3y agoNot really. Ads are basically always served in an iframe precisely so it can't access content in the parent page. Even if worse came to worst and there was a bug on the parent page that let the ad JS access its parent page context, it should still be sandboxed to just that page.