What are the risks of letting users upload and run Javascript

前端 未结 4 1663
死守一世寂寞
死守一世寂寞 2021-01-03 05:38

If you have say an HTML5 games arcade, that allows users to upload a script that runs a game with HTML5 and Javascript, assuming you have no filters on their input (apart fr

4条回答
  •  醉话见心
    2021-01-03 06:15

    Only my two cents..

    One risk is when someone uploads a script that redirects the user to malicious website and that website is doing nasty stuff - user never intended to reach that website surely not via arcade game.

提交回复
热议问题