Hacker News new | past | comments | ask | show | jobs | submit login

No, the attacker decides the hash, since they inject the <script> tag using XSS.



Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: