Hacker News new | ask | show | jobs
by qu4z-2 4409 days ago
Isn't that CSRF, though?
1 comments
smsm42 4408 days ago
CSRF is what allows you to post. XSS is what happens after it is posted.
link