4 ms·
> The vulnerability centres around users' ability to place custom Javascript and Flash content into their listings pages. Wait, what? Is that true? If so, how
by ufmace 12y ago
> The vulnerability centres around users' ability to place custom Javascript and Flash content into their listings pages.
Wait, what? Is that true? If so, how could anybody think that allowing the user to place custom Javascript in their listing pages is a good idea in this day and age?
- pessimizer 12y agoIt was common before facebook, and at this point businesses are built on it.
- deleted 12y ago[deleted]
- Igglyboo 12y agoI have no idea, it was incredibly annoying on myspace. It's still used on tumblr but thankfully not as much as on myspace, people still include autoplaying music players however....
- yaeger 12y agoReally surprised to hear they still allow that. I haven't done business with eBay in years. Way back when, I felt pretty smart when discovering that I could just add extra pictures I served from some other webspace into my listings. Because eBay would charge you extra if you wanted to add more pictures. But I always thought that if people can add anything to such a listing, how is that different than visiting some malware invested site? Just add the payload and you have a website distributing your malware and all you need to do is choose a popular item to sell and you immediately have a very large audience.