2 ms·
If you're pulling the public key from the document to use it to verify the document, you've already lost.
by sarciszewski 12y ago
If you're pulling the public key from the document to use it to verify the document, you've already lost.
- wahern 12y agoYou're using it to verify JavaScript code, not the document. Presuming you also disabled inline JavaScript, you've just shutdown cross-site scripting (XSS) attacks.