Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Right, if you get tricked into visiting the site then first-party scripts can run. But with XSS protection intact and RequestPolicy preventing any third-party access, the scope of possible attacks is pretty narrow.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: