Probably a dumb question but is Safari vulnerable to this? I know Apple and Google are kind of cats and dogs corporate rivals. Just wondering if Apple might be extra motivated to keep Safari patched against Google ploys like this. I would think the smart tech guys on the Safari development team would be on the lookout for this kind of thing.
Honestly I don’t know about Safari. Might want to get in the Apple tech forums and search around or ask. But it seems it is an industry standard for them to do all this.
The reason being they package it up in a way with the Javascript so that the page will not render the needed elements to see it or use it. At that point no matter what browser it is it has to be accepted to see or use the site at all.
So if Safari is rendering it then it is also allowing the scripts even if just temporary while you are there.
It was a great question... :)