News for hackers. Stuff that matters.

A comment on More on DataSpii: How extensions hide their grabs and how they’re discovered. Parent comment

Re:More on DataSpii: How extensions hide their grabs and how... by gorhill on Thursday July 18, 2019 @03:24PM (#20473118)
The default `script-src` policy in extensions is 'self', no JavaScript code outside the package will be allowed to execute.
[ Parent | on HN ]

There are no comments on this comment yet.