And if they had used PDF.js incorrectly in the browser, it would allow XSS attac... | Hacker News

Hacker News .hnnew | past | comments | ask | show | jobs | submit

yencabulator on May 20, 2024 | parent | context | favorite | on: CVE-2024-4367 – Arbitrary JavaScript execution in ...

And if they had used PDF.js incorrectly in the browser, it would allow XSS attacks on the domain used for MS Teams.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact