How to access plain text content retrieved via [removed] in JavaScript?

前端 未结 4 2010
我寻月下人不归
我寻月下人不归 2020-11-29 06:03

When using , where the URL refers to a plain text file, is there a way to access the content

4条回答
  •  独厮守ぢ
    2020-11-29 06:36

    Note that if this were supported, it would provide a huge security hole and a means of getting around cross-site scripting protections that protect json and other data. Essentially, my nasty web page (nasty.com, say) could access your private data that's protected by cookies by loading it using a script tag. e.g.

    
    
                                     
                  
提交回复
热议问题