13 ms·
Yup, you're right. I tried to inspect and intercept every XHR call that gmail was making to ensure we weren't missing any holes. But it's entirely possible that
by OmarIsmail 13y ago
Yup, you're right. I tried to inspect and intercept every XHR call that gmail was making to ensure we weren't missing any holes. But it's entirely possible that there's analytics/tracking data that got passed.
Like we said, this is a starting point. It's open source. As with any type of security product that has a hope of being good, try and break it and let's fix it together :)
- tmzt 13y agoYou could hash the code delivered by Google and throw up a big warning if it has changed. I believe that Google does releases of the entire application at once so this method should detect when a roll-out has occured.