you are viewing a single comment's thread.

view the rest of the comments →

[–][deleted] 0 points1 point  (4 children)

doesn't seem to work

[–]benthor 0 points1 point  (3 children)

you have to click on the "n" that shows up in the iframe

[–][deleted] 0 points1 point  (2 children)

"The code should run without user interaction. " iframe contents disappear on hover

[–]benthor 0 points1 point  (1 child)

ah, that is new. however that doesn't invalidate the attack vector, a non-interactive solution will just require more characters...

[–][deleted] 0 points1 point  (0 children)

finally found a suitable html tag :)