Major sites running unauthenticated JavaScript on their payment pagesshkspr.mobi214 pointsedent8 years ago