The trustworthiness of the domain name would effectively be stolen. | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

gbba on July 5, 2018 | parent | context | favorite | on: Itty Bitty: Sites contained within their own links

The trustworthiness of the domain name would effectively be stolen.

chias on July 6, 2018 [–]

I disagree. It's more similar to how you can "inject" your scripts into fiddle.jshell.net (via JSFiddle), googleusercontent.com (via Google Translate), etc.

Have a look at https://fiddle.jshell.net/pvcL4mjh/1/show/light/

Would you call that XSS / did I just steal JSFiddle's trustworthiness?

ummonk on July 12, 2018 | [–]

That's a fair point.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact