Your browser lets remote code send packets to localhost???!
Your browser lets remote code send packets to localhost???!
Posted Jun 12, 2025 12:09 UTC (Thu) by paulj (subscriber, #341)In reply to: Your browser lets remote code send packets to localhost???! by excors
Parent article: Covert web-to-app tracking via localhost on Android
Sure, it's not technically XSS... But still, in what sane universe do browsers allow code from remote web hosts to make network API calls to localhost services?
How... I honestly thought this was something browsers simply did not allow. How..