3 ms·
I guess that obfuscated JS in SVG runs? Then it downloads the script that does shady stuff
by throwaway290 1y ago
I guess that obfuscated JS in SVG runs? Then it downloads the script that does shady stuff
- lostmsu 1y agoThat does not explain exactly what is wrong. The site could already run JS. It did not need SVG to do it.
- throwaway290 1y agoYeah I guess the original article is not clear on that. Other cases usually involved email but this is not