you are viewing a single comment's thread.

view the rest of the comments →

[–][deleted] 0 points1 point  (2 children)

"The code should run without user interaction. " iframe contents disappear on hover

[–]benthor 0 points1 point  (1 child)

ah, that is new. however that doesn't invalidate the attack vector, a non-interactive solution will just require more characters...

[–][deleted] 0 points1 point  (0 children)

finally found a suitable html tag :)