News for hackers. Stuff that matters.

A comment on Payment iframe - the easiest way to insert Stripe into your website. Parent comment

Re:Payment iframe - the easiest way to insert Stripe into yo... by cperciva on Monday August 13, 2012 @02:52PM (#4377437)
Except that the evil javascript will set its domain to yourdomain.com (you're allowed to strip components) and then it can tamper with anything else from yourdomain.com.
[ Parent | on HN ]

There are no comments on this comment yet.