CODEWITHSUNDEEP
javascriptsecurity
freddiefujiwara
freddiefujiwara

Reputation: 59059

How to work Facebook 'Like' button

From My technical interests. I'd like to how to work Facebook 'Like' button?

are there any security risk?

for example:

-Someone push my like button.

--if I 'm stolen my cookies If there is a blog that detailed explanation Could I have the URL?

Upvotes: 0

Views: 189

Answers (1)

Klemen Slavič
Klemen Slavič

Reputation: 19851

There is always a security risk involved in letting in Javascript from other domains (from the viewpoint of the user and third-party site provider), although that risk is somewhat minized if you serve your button inside an <iframe> on a separate API-like subdomain. That prevents parent Javascript code access to the contents of the frame and vice-versa. Basically, from the inside of the <iframe> you can only access the URL property of the parent page (and some other minor parameters).

Upvotes: 3

Related Questions