You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
If a repo script persistently stores sensitive data (as cookie, localStorage, etc...), then other repos opened by the user will also have access to this data. This isn't inherently a problem of bypassing CORS, so it should be mentioned as an additional risk (both in the README and the index)
I haven't tested if this "vulnerability" actually works, but I assume it's likely that it can be easily exploited
The text was updated successfully, but these errors were encountered:
If a repo script persistently stores sensitive data (as cookie,
localStorage
, etc...), then other repos opened by the user will also have access to this data. This isn't inherently a problem of bypassing CORS, so it should be mentioned as an additional risk (both in theREADME
and theindex
)I haven't tested if this "vulnerability" actually works, but I assume it's likely that it can be easily exploited
The text was updated successfully, but these errors were encountered: