Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Which you've noted three times but is just as wrong the third time as the first. You can break/disable SOP when it's trivially easy to edit the code.


> You can break/disable SOP when it's trivially easy to edit the code.

How? SOP isn't related to the code. It is only concerned with the page address.


The point is that you can put the code wherever you want, including inside the same origin context (e.g. right in the main HTML).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: