New note by mmn

mmn
2016-09-16T06:49:57+00:00

In this case I'm not the one applying updates. All the CDN based script embeddings are made with version numbers in the URL. The attack vector is an evil server thah will serve different files depending on refererer/client/randomness".