4 ms·

It doesn't, as a cursory glance at the source would show.

• toxicFork 13y ago
  The server could check which page is embedding the script and then server evil.js instead of good.js :)
  • Dylan16807 13y ago
    Better hope they don't visit the real site after the fake site!
    • cmelbye 13y ago
      Don't cache the fake version?