Skip to content
This repository has been archived by the owner on Mar 28, 2019. It is now read-only.

Ditch SCRIPT_ELEMENT_NOT_ALLOWED ? #98

Open
flukeout opened this issue Sep 29, 2017 · 1 comment
Open

Ditch SCRIPT_ELEMENT_NOT_ALLOWED ? #98

flukeout opened this issue Sep 29, 2017 · 1 comment

Comments

@flukeout
Copy link

This is outdated, correct?

@Pomax
Copy link
Contributor

Pomax commented Oct 16, 2017

It should be - this is from before we had a separate preview domain, which allowed someone to craft some sneaking JS that would read in document.cookies =)

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants