2

After reading JSONP callback doesn't execute when running at localhost and googling a lot, I am still unclear if there is a potential XSS security threat.

Is this "hole" covered in popular browsers nowadays?

(notice the dot in the URI)

1 Answer 1

0

Yes it is a potential security flaw, just be smart with your coding to check for XSS... I'm not sure but I think Firefox4 blocks this hole...

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.