Hacker News new | ask | show | jobs
by dedward 5627 days ago
Security is a big one here - doing a <Script src=> include from another domain might be really convenient for getting around cross-domain limits - but if that remote server has been compromised, or if it's run by dodgy individuals, they now have complete control of your webpage and can do incalculable damage to your business.