tomayac’s avatartomayac’s Twitter Archive—№ 3,596

  1. "A third-party website can use JavaScript to submit a form in an iframe without user interaction." bit.ly/yzbQ9u