Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That isn't that far removed from convincing people to hit F12 and enter that code in the console, which is why Self-XSS, while ideally prevented, is much lower than any kind of stored/reflected XSS.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: