3 ms·
isn't this actually XSRF and worse than XSS? Also, if users can run arbitrary JS on someone else's server then what stops them from doing CPU-bound work such a
by sigseg1v 10mo ago
isn't this actually XSRF and worse than XSS?
Also, if users can run arbitrary JS on someone else's server then what stops them from doing CPU-bound work such as crypto miners?
- sigseg1v 10mo agoSSRF* sorry typo