2018-01-08
Hacker Noon
Developer indicts culture of dependency-laden projects with cautionary tale of an npm package for websites that would scrape and send sensitive user info
The following is a true story. Or maybe it's just based on a true story. Perhaps it's not true at all. Tweets: @thejameskyle and @thomasfuchs Tweets: James Kyle / @thejameskyle : Seems like browsers...
2016-05-29
The Verge
Genius' web annotator tool exposed sites on genius.it to XSS attacks by ignoring CSP policy
Vijith Assar / The Verge :
2016-05-28
The Verge
Genius' web annotator tool exposed sites on genius.it to XSS attacks by ignoring CSP policy
Vijith Assar / The Verge :
Loading articles...