diff --git a/Publishing-Your-Archive.md b/Publishing-Your-Archive.md index 8e34628..b18de43 100644 --- a/Publishing-Your-Archive.md +++ b/Publishing-Your-Archive.md @@ -54,7 +54,7 @@ Urls look like: `https://archive.example.com/archive/1493350273/en.wikipedia.org ## Security Concerns -Re-hosting other people's content has security implications for any other sites sharing your hosting domain. Make sure you understand the dangers of hosting unknown archived CSS & JS files [on a shared domain](https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy). +Re-hosting other people's content has security implications for any other sites sharing your hosting domain. Make sure you understand the dangers of hosting untrusted archived HTML/JS/CSS [on a shared domain](https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy). Due to the security risk of serving some malicious JS you archived by accident, it's best to put this on a domain or subdomain of its own to keep cookies separate and help limit the effectiveness of [CSRF attacks](https://en.wikipedia.org/wiki/Cross-site_request_forgery) and other nastiness. ## Copyright Concerns