Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
aidenn0
25 days ago
|
parent
|
context
|
favorite
| on:
We pwned X, Vercel, Cursor, and Discord through a ...
With SVGs you can serve them from a different domain. IIUC the issue from TFA was that the SVGs were served from the primary domain; had they been on a different domain, they would have not been allowed to do as much.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search: