Javascript reference external script file - security implications
- by rkrauter
Hi,
If I have a reference to an external third party JavaScript file on my website, what are the security implications? Can the JavaScript file be used to steal cookies?
One example of this is the Google Analytics JavaScript reference file.
Could the third party technically steal cookies or any other sensitive information from my logged on users (XSS)?
The whole cross domain scripting has me confused sometimes.
Thanks!