3 ms·
Why doesn't github just fix it to send the correct content-type back?
by zenocon 13y ago
Why doesn't github just fix it to send the correct content-type back?
- matthavener 13y agoIf someone can host arbitrary html and js on the *.github.com domain, they can set cookies for github.com. See http://homakov.blogspot.com/2013/03/hacking-github-with-webkit.html http://homakov.blogspot.com/2013/03/hacking-github-with-webk...