News for hackers. Stuff that matters.

A comment on RJS leaking vulnerability in multiple Rails applications.

Re:RJS leaking vulnerability in multiple Rails applications by madrobby on Friday November 29, 2013 @10:56PM (#6822210)
This is why `request.xhr?` exists. It will be false when the action is called with JSONP.
[ Parent | on HN ]
Re:RJS leaking vulnerability in multiple Rails applications by homakov on Friday November 29, 2013 @11:01PM (#6822229)
+1 https://twitter.com/homakov/status/406466616897986560
[ Parent | on HN ]