Hacker News new | ask | show | jobs
by DownrightNifty 712 days ago
JS on Google Sites, Apps Script, etc. runs on *.googleusercontent.com, otherwise cookie-stealing XSS happens.