Y
Hacker News
new
|
ask
|
show
|
jobs
by
cbr
4301 days ago
You can already do that.
good.com: <script src="/js/site.js"> evil.com: <img src="https://www.good.com/js/site.js">
Then use the navigation timing api to figure out whether the js was already in cache.
1 comments
cbr
4297 days ago
(Actually, you could use the onload event; you don't actually need navigation timings.)
link