News for hackers. Stuff that matters.

A comment on Y Combinator: Bookmarklet.

Re:Y Combinator: Bookmarklet by alexandercrohde on Wednesday January 03, 2018 @11:28AM (#16062327)
Isn't this a minor security issue (CSRF?)

Theoretically, can't any website put this tidbit in an ajax request and get people to submit their page?

[ Parent | on HN ]
Re:Y Combinator: Bookmarklet by aeling on Wednesday January 03, 2018 @11:29AM (#16062344)
It just populates the form fields, you still have to click submit from YC's page.
[ Parent | on HN ]