News for hackers. Stuff that matters.

A comment on Itty Bitty: Sites contained within their own links. Parent comment

Re:Itty Bitty: Sites contained within their own links by chias on Wednesday July 04, 2018 @11:02PM (#17460590)
What would such a cross-site scripting vuln do? There isn't anything to steal.

Moreover you wouldn't use this for anything where you aren't in control of where people get the links from, because as soon as someone else starts sharing it they can of course edit it too.

[ Parent | on HN ]
Re:Itty Bitty: Sites contained within their own links by gbba on Thursday July 05, 2018 @06:31AM (#17462125)
The trustworthiness of the domain name would effectively be stolen.
[ Parent | on HN ]
Re:Itty Bitty: Sites contained within their own links by chias on Friday July 06, 2018 @12:50AM (#17468927)
I disagree. It's more similar to how you can "inject" your scripts into fiddle.jshell.net (via JSFiddle), googleusercontent.com (via Google Translate), etc.

Have a look at https://fiddle.jshell.net/pvcL4mjh/1/show/light/

Would you call that XSS / did I just steal JSFiddle's trustworthiness?

[ Parent | on HN ]
Re:Itty Bitty: Sites contained within their own links by ummonk on Thursday July 12, 2018 @09:24AM (#17514187)
That's a fair point.
[ Parent | on HN ]