Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Tricky Meebo bar uses your Google+ profile via iframe (meebo.com)
4 points by _rrnv on March 24, 2013 | hide | past | favorite | 2 comments


How is that "tricky"? It is a standard pattern for preventing XSS/XSRF


I just realised this works just like interactive tweet or share buttons, but it was the first time I saw profile elements and activity log used like that, visible on some other page I never logged into using Google+. Hence it felt "tricky", especially since Meebo's implementation is non-standard, I can't find these elements in widgets or API.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: