Hacker News new | ask | show | jobs
by fjni 702 days ago
Wouldn't you be able to deploy an app script website, which is hosted on "script.google.com" and make use of this?
2 comments
jhdifdhsak 702 days ago
your code do not run from that domain at all.
link
rc_mob 702 days ago
it does if I hack your dns server :)
link
agartner 702 days ago
It seems most if not all google domains are HSTS preloaded so no you can't: https://hstspreload.org/?domain=script.google.com
link
pixl97 702 days ago
Does Chrome do certificate pinning checking in this case?
link
gnaman 701 days ago
No it does not. Firefox does by default. But then again, you would need the user to install your cert. Good luck with that
link