News for hackers. Stuff that matters.

A comment on Google Is 2B Lines of Code, All in One Place. Parent comment

Re:Google Is 2B Lines of Code, All in One Place by kuschku on Wednesday September 16, 2015 @02:34PM (#10228757)
Here is one: http://arstechnica.com/security/2015/04/no-joke-googles-apri...

The issue was that they wanted to load the page – with the user logged in, etc – on com.google. For this they implemented an explicit URL parameter that would allow this.

[ Parent | on HN ]
Re:Google Is 2B Lines of Code, All in One Place by magicalist on Wednesday September 16, 2015 @04:08PM (#10229471)
> Attackers could have seized on the omission of the X-Frame-Options header to change a user's search settings, including turning off SafeSearch filters

The horror!

[ Parent | on HN ]