Barclays Bank Using Internet Archive as CDN for JavaScript Files?

Re:Barclays Bank Using Internet Archive as CDN for JavaScrip... by mijoharas on Friday July 03, 2020 @08:07AM (#23723265)

I'm gonna invoke hanlon's razor (never attribute to malice what can equally be explained by stupidity) here to assert that this isn't an attack.

Looks like their main homepage doesn't have a CSP policy at all https://cspvalidator.org/#url=https://www.barclays.com

I really hope they have a postmortem and actually implement a CSP for their site, pretty crazy not to, especially for a bank.

[ Parent | on HN ]

Re:Barclays Bank Using Internet Archive as CDN for JavaScrip... by yyyk on Friday July 03, 2020 @08:31PM (#23728928)

"implement a CSP for their site, pretty crazy not to, especially for a bank."

I just checked some of the local banks. Oh dear...

[ Parent | on HN ]