*Hindsight and all that but still, this is not a good idea.* Do you mean the bro... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

wglb on Aug 7, 2015 | parent | context | favorite | on: Firefox exploit found in the wild

Hindsight and all that but still, this is not a good idea.

Do you mean the browser, or just this particular feature?

Recommended reading: http://lcamtuf.coredump.cx/postxss/ and http://lcamtuf.coredump.cx/tangled/.

If you do choose to read them, I recommend doing it earlier in the day--fitful sleep has been observed after evening reading of the above.

jacquesm on Aug 7, 2015 [–]

I'm aware of those. It's the 'inband/out-of-band' problem of old rearing its ugly head again, if you mix code/control and data in one stream it's asking for trouble.

Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact