5 ms·

Wouldn't you be able to deploy an app script website, which is hosted on "script.google.com" and make use of this?

by fjni 2y ago

jhdifdhsak 2y ago
your code do not run from that domain at all.
- rc_mob 2y ago
  it does if I hack your dns server :)
  - agartner 2y ago
    It seems most if not all google domains are HSTS preloaded so no you can't: https://hstspreload.org/?domain=script.google.com https://hstspreload.org/?domain=script.google.com
pixl97 2y ago
Does Chrome do certificate pinning checking in this case?
- gnaman 2y ago
  No it does not. Firefox does by default. But then again, you would need the user to install your cert. Good luck with that