3 ms·
Not "any user action". The user has to click the link. The fact that a link can be styled to look like anything isn't very damning.
by pulisse 2y ago
Not "any user action". The user has to click the link. The fact that a link can be styled to look like anything isn't very damning.
- masfuerte 2y agoAccording to the advisory the user can click on a button and the event handler issues the request. There isn't a link. The user has no indication of what's going to happen beyond whatever the page chooses to tell them.