"... only whitelist the domains I want ..." Well, this is easy to exploit. Use an URL under my domain and proxy to the ad server. JavaScript is a problem. Simple as that.
"... only whitelist the domains I want ..." Well, this is easy to exploit. Use an URL under my domain and proxy to the ad server. JavaScript is a problem. Simple as that.