Comment Comment by ianpurton How do I know if my site is vulnerable to this attack?Edit.Seems that some preventative steps are....- have all your javascript assets hosted under your domain.- have a CAA record see https://en.wikipedia.org/wiki/DNS_Certification_Authority_Au...- If you use a third party to host JS then THEY need to have CAA configured or you need to use sub resource integrity. parent ianpurton 4 years ago
Edit.
Seems that some preventative steps are....
- have all your javascript assets hosted under your domain.
- have a CAA record see https://en.wikipedia.org/wiki/DNS_Certification_Authority_Au...
- If you use a third party to host JS then THEY need to have CAA configured or you need to use sub resource integrity.