News for hackers. Stuff that matters.
Re:Standardizing lessons learned from AMP by wmf on Thursday March 08, 2018 @02:52PM (#16547108)
Re:Standardizing lessons learned from AMP by tatersolid on Thursday March 08, 2018 @09:48PM (#16549491)
Async still prevents the DOMcontentloaded event from firing, and if you can’t sandbox JS into an iframe you’re screwed security-wise if the linked source gets owned or turns evil.