Embed Notice
HTML Code
Corresponding Notice
- Embed this notice
Tassoman (tassoman@orwell.fun)'s status on Saturday, 02-Sep-2023 04:58:30 JSTTassoman I think it's at least vulnerable to DNS poisoning.
fetching by IP address could be a mitigation.
I don't know about how would deal with HTTP redirects. If it follows, well ...
A good security audit would never let this pass, at least here in Europe where we have security concern for remote fetching Google Fonts and CDN scripts