Javascript reference external script file - security implications

Posted by rkrauter on Stack Overflow See other posts from Stack Overflow or by rkrauter
Published on 2010-05-07T21:26:51Z Indexed on 2010/05/07 21:28 UTC
Read the original article Hit count: 254

Filed under:
|

Hi,

If I have a reference to an external third party JavaScript file on my website, what are the security implications? Can the JavaScript file be used to steal cookies?

One example of this is the Google Analytics JavaScript reference file.

Could the third party technically steal cookies or any other sensitive information from my logged on users (XSS)?

The whole cross domain scripting has me confused sometimes.

Thanks!

© Stack Overflow or respective owner

Related posts about JavaScript

Related posts about web-security