Could you make an alert(1) or not? If you couldn't, it's plausible the non-security developers incorrectly speculated it was possible?
I don't understand why he didn't make an alert(document.domain), the universal "this is legit" bat signal. Instead, creating some weird form phishing demo? I think there is more to this story, it sounds like this wasn't…
Could you make an alert(1) or not? If you couldn't, it's plausible the non-security developers incorrectly speculated it was possible?
I don't understand why he didn't make an alert(document.domain), the universal "this is legit" bat signal. Instead, creating some weird form phishing demo? I think there is more to this story, it sounds like this wasn't…