Have Geek Brain

Javascript link external script file - security implications

If I have a link to an external third-party JavaScript file on my website, what are the security implications? Can JavaScript be used to steal cookies?

One example of this is the Google Analytics JavaScript reference file.

Can a third party technically steal cookies or any other sensitive information from my registered users (XSS)?

The whole scripting script confuses me sometimes.

Thanks!

+2


a source to share


1 answer


Yes, external JavaScript can do everything that your own scripts can do. This includes reading cookies and even worse: doing something with your visitors.



Only include JavaScripts from external websites that you really really like.

+3


a source






More articles:


All Articles