Injecting an iframe into websites could trigger an assertion error, because the ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		amelius on Dec 26, 2019 \| parent \| context \| favorite \| on: I only use an iFrame to crawl and scrape content Injecting an iframe into websites could trigger an assertion error, because the iframe isn't supposed to be there.

natzar on Dec 26, 2019 [–]

Hi, that's right. Some sites protect html injection. Twitter protects their site very well, but if you use http tunneling they can't do nothing as you can modify X- headers.

stockkid on Dec 27, 2019 | [–]

Interesting, could you explain what you mean by http tunneling and how it can bypass protection against html injection?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact