←back to thread

DOMPurify, Security in the DOM, and Why We Really Need Both [pdf]

(www.usenix.org)
72 points _vvhw | 1 comments | 25 Sep 19 08:42 UTC | HN request time: 0.2s | source
1. will_hoskings ◴[27 Sep 19 11:00 UTC] No.21090520[source]▶
This looks like a good idea, but what happens when the user disables this by inspecting the code (or something)?