rspec/rules/S7074/rationale.adoc

4 lines
412 B
Plaintext
Raw Normal View History

When this flag is disabled, it allows the application to load and execute content from any source, including potentially unsafe ones.
This vulnerability can be exploited when a user interacts with untrusted web content, such as clicking on a malicious link or opening a compromised webpage.
The attacker can then inject harmful scripts or code into the application, bypassing the usual security restrictions.