News for hackers. Stuff that matters.

A comment on XSS in Google Finance. Parent comment

Re:XSS in Google Finance by DouweM on Tuesday July 30, 2013 @07:09PM (#6130744)
I'm not familiar with Google Finance, but the author states "This part of the code is responsible for querying an external domain for a newsfeed to be displayed on the plot as an overlay.". I'm guessing they just happened to come across a Google Finance URL using the &ntrssurl= parameter and figured that would be worth digging into.
[ Parent | on HN ]
Re:XSS in Google Finance by Ecio78 on Wednesday July 31, 2013 @04:59AM (#6132566)
He says also in the comments: "Manual testing, the ntrssurl parameter was present in an example in the documentation for adding custom news feeds to the plot :) ."
[ Parent | on HN ]