Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It will only work in browsers that support UTF-7, which as far as I know is only Firefox. The decoded UTF-7 injected code is as follows:

    "}].sniff=[stealData,{"__IGNORE__":"


Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: