DEV Community

Discussion on: Itty Bitty

Collapse
 
tirthaguha profile image
Tirtha Guha

How is this safe from XSS attacks?

Collapse
 
siddharthshyniben profile image
Siddharth

Scripting is a feature of Itty Bitty, but they are loaded in a sandboxed frame and storing data is not a thing, so it's as safe as any random website on the web.

Check out This site and this issue

Meanwhile, check out what happens when we try to access localstorage, cookies and stuff (from the site I linked to above):

Blocked