Re:Chrome deploys deep-linking in latest build despite priva...
by amsully on Friday February 21, 2020 @08:58AM
(#22383090)
The google document being used talks about crossing an origin-boundary.
So website with bad script injected is loaded by the user and is able to make requests to a logged-in banking website with time-based/scrolling attacks.
So website with bad script injected is loaded by the user and is able to make requests to a logged-in banking website with time-based/scrolling attacks.