3 ms·
If Google decides to change how they save drafts you're compromised. They also have complete control of the page so any key press or mouse movement you do they
by anemitz 13y ago
If Google decides to change how they save drafts you're compromised. They also have complete control of the page so any key press or mouse movement you do they can catch.
- OmarIsmail 13y agoYup, you're right. I tried to inspect and intercept every XHR call that gmail was making to ensure we weren't missing any holes. But it's entirely possible that there's analytics/tracking data that got passed. Like we said, this is a starting point. It's open source. As with any type of security product that has a hope of being good, try and break it and let's fix it together :)
- tmzt 13y agoYou could hash the code delivered by Google and throw up a big warning if it has changed. I believe that Google does releases of the entire application at once so this method should detect when a roll-out has occured.