3 ms·
The previous bbc article regarding this never stated that ebay allows users to embed javascript and flash into listings. No wonder they are having issues with x
by Robadob 12y ago
The previous bbc article regarding this never stated that ebay allows users to embed javascript and flash into listings. No wonder they are having issues with xss.
- makomk 12y agoAs far as I can tell they're not having problems with XSS. The listing description is actually an iframe served from a different domain with no access to anything on the eBay website. This appears to be a straightforward phishing attack.
- yaeger 12y agoSo, if I were to go to such a site with noscript activated, I would be okay? I mean, noscipt would probably set up to allow ebay.com so the site actually works, but this different domain will most likely be blocked, yes?