3 ms·
If it has to be inlined, how is that the same vulnerability? I thought the vulnerability was that script tags can fetch external scripts and a local script inte
by chc 13y ago
If it has to be inlined, how is that the same vulnerability? I thought the vulnerability was that script tags can fetch external scripts and a local script intercept the results. If you have to inline both scripts, you can only attack yourself.
- joev_ 13y agoSorry, used the wrong term. I mean it can be injected as a script tag into an xdomain site.