undefined | Better HN

0 pointsairza9y ago0 comments

Yes, but that gets passed to the server.

0 comments

3 comments · 2 top-level

ghayes9y ago· 1 in thread

What about httsp://example.com/login#vulnerable-fragment

airzaOP9y ago

Yes, as i commented elsewhere in this thread that would be fine.

sbarre9y ago

It may get logged by the server but if it's designed to be parsed client-side, there may not be any server-side code examining or sanitizing that value before the SPA gets to it.

j / k navigate · click thread line to collapse