* Mark Banner:

> With no indication of where the submission is going to, the user could
> be at serious risk.

It's also difficult to demonstrate that the action URL is malicious
because it can just quietly store the information, without actually
displaying any brand-related material.
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

Reply via email to