search

john801205 / cookie-profile

0 stars 0 forks source link

Should use window.top instead of window.parent #1

Closed john801205 closed 8 years ago

john801205 commented 8 years ago

It's easy for third parties to attack when using window.parent. They can just embed third parties inside third parties to break the isolation.

john801205 commented 8 years ago

fixed