Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> There are at least three places where you can get injected, one is from the ISP

I'm not sure if they still do it, but Vodafone in my country (and many others) used to cache and compress photos on all websites, which often led to visible degradation in image quality. Luckily I discovered that their software respected the `Cache-Control: no-transform` header so include that header on all my websites now.



Vodafone did also inject custom js/html in non HTTPS pages (obviously). This was 2 years ago.


That's right. The js rewrote all image src attributes to point to the "optimised" photos they'd cached.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: