“Major sites running unauthenticated JavaScript on their payment pages – Terence Eden’s Blog”

Sigh.

Baldur's Notes @baldur