3 ms·

Editor is not sandboxed in cross domain iframe environment. Homakov go!

• quarterto 13y ago
  Homakov used XSRF! It's super effective!
• Hario 13y ago
  I don't understand. Can you link me to a thing that will teach me to understand, please?
  • stfu 13y ago
    Upvoted you because I am in the same boat. But some of the best hn comments are (imho) those that require some searching around before understanding them. At least I just did and got a step closer towards enlightenment :)
  • nitrogen 13y ago
    Use the search box at the bottom of the page on HN, or hit hnsearch.com, search for "Homakov" (click the radio button to limit to stories), and if that's not enough, add in key words from the parent post (iframe, domain, cross-domain, sandbox, etc.).