Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
TheDong
on June 28, 2015
|
parent
|
context
|
favorite
| on:
The NoScript Misnomer
RequestPolicy won't save you if the link is to a subdomain of vjs.zendcdn.net which is whitelisted, but also the site you're visiting.
wtallis
on June 28, 2015
[–]
Right, if you get tricked into visiting the site then first-party scripts can run. But with XSS protection intact and RequestPolicy preventing any third-party access, the scope of possible attacks is pretty narrow.
Consider applying for YC's Fall 2026 batch!
Applications
are open till July 27.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
