Hostrisk

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

Lesson from the Hotjar vulnerability: HTTP-Only (XSS protection) is not effective if you have OAuth

Security

1 Posts 1 Posters 5 Views

C Offline

C Offline
Cerberus
wrote on last edited by

#1

https://www.reddit.com/r/netsec/comments/1ef7n29/lesson_from_the_hotjar_vulnerability_httponly_xss/
DISCLAIMER: Please note, that this article is not the work of (or owned by) Hostrisk.com. Attribution and copyright of this article is retained in full by the original author referred to in the Source link above

1 Reply Last reply
0

Hostrisk

Lesson from the Hotjar vulnerability: HTTP-Only (XSS protection) is not effective if you have OAuth

Individual Categories