Terence Eden personal blog
Major sites running unauthenticated JavaScript on their payment pages
A few months ago, British Airways' customers had their credit card details stolen. How was this possible? The best guess goes something like this: BA had 3rd party JS on its payment page <script src="https://example.com/whatever.js"></script> The 3rd party's site was hacked, and the JS was changed. BA's customers ran…
- Points
- 214
- HN comments
- 88
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacyWeb & Frontend2018
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Nov 29, 2018 | Major sites running unauthenticated JavaScript on their payment pages by edent | 214 | 88 |
