3 ms·
It seems like you'd need to inject malicious Javascript into the page before you could run an attack like this. General XSS attacks would be the larger, encompa
by Lambdanaut 12y ago
It seems like you'd need to inject malicious Javascript into the page before you could run an attack like this. General XSS attacks would be the larger, encompassing vulnerability.
- nitrogen 12y agoIt seems malicious HTML could do it, too, if the global element variable replaces some other global object of the same name.