However, today, this is an extremely dubious practice, because of how easy it is for a third party origin to use a <script> to execute 2/
like Service Worker if you really want to shoot yourself in the foot). F.p.toString is one possible vector of the above vuln 12/
-
-
but basically anything that lets you hook into JS comings-and-goings is potentially subject to this kind of vuln. 13/13
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.