Also don’t submit form data to websites you don’t trust…
Travis Laine

I think this attack is just as likely to come from a website you do trust than one you don’t. Forms can submit data to anywhere from anywhere, and this could be deployed via JavaScript– a properly constructed banner ad could probably do it.

One clap, two clap, three clap, forty?

By clapping more or less, you can signal to us which stories really stand out.