* Mark Banner:

> With no indication of where the submission is going to, the user could
> be at serious risk.

It's also difficult to demonstrate that the action URL is malicious
because it can just quietly store the information, without actually
displaying any brand-related material.
_______________________________________________
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security

Reply via email to