5 ms·

What about embbedding iframes?

• shubb 13y ago
  That would look to be correct, see here for example: http://hackers2devnull.blogspot.co.uk/2013/07/exploiting-post-method-xss-silently.html http://hackers2devnull.blogspot.co.uk/2013/07/exploiting-pos... In which case, I woner why more sites (or evil ads via an ad network) don't attack our home routers?
  • chc 13y ago
    Probably because it isn't really necessary — it's easier just to own the user's PC the old-fashioned way.