And, as we all know, script inclusions are exempt from SOP. So, if the returned CSV forms valid JavaScript, it's possible that we can read information.
確定! 回上一頁