2 ms·
It wouldn't prevent the admin page from exfiltrating data, though, right? Like, POSTing whatever data is loaded on the page to an arbitrary attacker controlled
by losvedir 6mo ago
It wouldn't prevent the admin page from exfiltrating data, though, right? Like, POSTing whatever data is loaded on the page to an arbitrary attacker controlled website.
- scarface_74 6mo agoThat would require the logged in user to do something stupid. That’s like saying what’s to prevent the authorized user from emailing his credentials to a random person.
- dinkumthinkum 6mo agoYou may want to go back and ask the expert in that vibe coding equation if it would say this is a wise approach.