News for hackers. Stuff that matters.

A comment on This link says it's from YouTube but it's not. Parent comment

Re:This link says it's from YouTube but it's not by IgorPartola on Monday April 12, 2010 @04:26PM (#1260265)
http://voice.google.com/ redirects to http://google.com/voice. Technically different domains, but I would be really annoyed if I had to confirm this every time. I suppose you could add a white list, but now we are just annoying people when they first start using a particular install of a browser.
[ Parent | on HN ]
Re:This link says it's from YouTube but it's not by chacha102 on Monday April 12, 2010 @08:58PM (#1260885)
No, I'm talking about seeing something like:

http://voice.google.com/?r=google.com/voice, where the resulting URL is inside the query_string

[ Parent | on HN ]
Re:This link says it's from YouTube but it's not by IgorPartola on Monday April 12, 2010 @09:42PM (#1260946)
So then we start obfuscating the URL parameters? Or what if google.com/voice is just one step in a series of redirects? What if some "clever" dude decides to protect against this and say base64 encode the r argument to "protect" his app?
[ Parent | on HN ]