- A vulnerability which uses the circumstance that a script referenced through a
scriptelement is exempt from the same-origin policy, as scripts need to work across domains. An attacker may access and use what is being loaded using the respective script, and thus leaked across origins.
This term is sponsored by: your name/company?
- Previous term: Cross-site request forgery
- Next term: Cross-site scripting
- Random term: PLT (webglossary.info/random 🎲)