Re: HTML imports: new XSS hole?

So long as they're handled with the same policy and restrictions as the
script tag, it shouldn't be any worse.
On Jun 2, 2014 2:35 AM, "Anne van Kesteren" <annevk@annevk.nl> wrote:

> How big of a problem is it that we're making <link> as dangerous as
> <script>? HTML imports can point to any origin which then will be able
> to execute scripts with the authority of same-origin.
>
>
> --
> http://annevankesteren.nl/
>
>