Re: [slightlyoff/ServiceWorker] why cant i register a embedded function as for shared worker? (#902)

If you are able to execute a XSS attack in a domain , you can execute code non only inside the worker. It seams a tautology. The body is a function , if you can modify a function you can modify also the remaining scripts on the page.

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/slightlyoff/ServiceWorker/issues/902#issuecomment-223749125