Hacker News new | past | comments | ask | show | jobs | submit login

It could cause some very strange behavior in minified code. JS allows chained assignment like so:

a = b = c = 4

Is totally valid, and assigns 4 to all three variables. It could cause all sorts of undefined behavior, and plenty of interesting, almost undetectable obfuscation. XSS is just the tip of the iceberg.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: