scottjehl/Respond

found security bug in respond-proxy.html

Opened this issue · 0 comments

howieye commented

window.location.href = domain;
the variable domain is from url query string, it can easily be phishing attacks.