I am making a bookmarklet so that a user can cross domain post to my server using CORS from any page. The user has to authenticate before posting and cookies are used. Is there any way to prevent a malicious website from imbedding javascript code in their webpage to do cross domain post to my server using the user's credential?
1 Answers
Related