4 ms·
Where do you get "affirmatively acts to proceed with the install"? The original advisory suggests that any website can fire off these marketplace requests in r
by masfuerte 3y ago
Where do you get "affirmatively acts to proceed with the install"? The original advisory suggests that any website can fire off these marketplace requests in response to any user action.
- pulisse 3y agoNot "any user action". The user has to click the link. The fact that a link can be styled to look like anything isn't very damning.
- masfuerte 3y agoAccording to the advisory the user can click on a button and the event handler issues the request. There isn't a link. The user has no indication of what's going to happen beyond whatever the page chooses to tell them.