It will run if its in an <object> tag. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		kevin_thibedeau 30 days ago \| parent \| context \| favorite \| on: We pwned X, Vercel, Cursor, and Discord through a ... It will run if its in an <object> tag.

amonith 30 days ago [–]

So if you're directly embedding the thing. This is a somewhat rare use case, should not be banned almost anywhere...

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact