4 ms·
Google Docs is in HTTPS so they need to proxy the assets like Github does : https://github.com/blog/743-sidejack-prevention-phase-3-ssl-proxied-assets https://
by bibinou 14y ago
Google Docs is in HTTPS so they need to proxy the assets like Github does :
https://github.com/blog/743-sidejack-prevention-phase-3-ssl-proxied-assets https://github.com/blog/743-sidejack-prevention-phase-3-ssl-...
- Yarnage 14y agoInteresting. I never thought of that. It seems almost silly that you're bringing insecure content over a secure channel like that but then again it is only images.
- EvilTerran 14y ago"only images" As long as they don't do WMFs, with their code-injection-by-design functionality... http://en.wikipedia.org/wiki/Windows_Metafile_vulnerability http://en.wikipedia.org/wiki/Windows_Metafile_vulnerability