mathiasbynens / jsperf.com

jsPerf.com source code
http://jsperf.com/
Other
473 stars 56 forks source link

Javascript injection in comments #252

Open wolverineks opened 6 years ago

wolverineks commented 6 years ago

It looks like a comment on https://jsperf.com/bind-vs-other-ways forces a redirect to a movie download

<object class="frame" data="http://tinyurl.com/yc76oyab" type="application/xhtml+xml"><param name="allowscriptaccess_denied" value="never" /></object>