Hacker News new | ask | show | jobs
by unfed 4765 days ago
Combination of XSS and CSRF.
1 comments
benregenspan 4765 days ago
This seems like it's just plain XSS - it doesn't take advantage of a user's serverside session to forge an action on their behalf.
link