HTML · Security · Senior · Scenario
How can meta refresh be abused?
Short Interview Answer
Open redirects / phishing-like redirects if attacker controls content.
Detailed Explanation
Prefer HTTP redirects. Avoid user-controlled refresh URLs.
Did you know this answer?