Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CSRF protection from cross-origin <script> tags #13345

Merged
merged 1 commit into from Dec 17, 2013
Merged

Commits on Dec 17, 2013

  1. CSRF protection from cross-origin <script> tags

    Thanks to @homakov for sounding the alarm about JSONP-style data leaking
    jeremy committed Dec 17, 2013
    3
    Copy the full SHA
    1650bb3 View commit details
    Browse the repository at this point in the history