Hacker News new | ask | show | jobs
by freditup 5051 days ago
Agreed. The 3D view is definitely a cool thing no doubt, but I'm not really seeing it as much use for preventing XSS vulnerabilities. That being said, I think the author of the post recognized this and was just sharing that it could rarely help.
1 comments

Agreed. It's good to be aware of it as a developer.

In our case it was lucky that we happened to view a page with a vulnerability, and there happened to be data that would be interpreted as an HTML tag. However, I believe in probability. Nothing is certain and so we try to put in place practices that will increase the probability of finding errors, etc.

The 3D view is just another little wrench in our toolbelt that increases our odds.