Airports have deployed so-called branded promotional hotspots, and there are plenty of companies that help businesses set up Wi-Fi hotspots that append ads via JavaScript injection.

Recoup the cost by creating a mechanism to inject ADs into browsing session. This likely explains why only Xfinity Wifi users are subject to this JS injection. From a technical perspective, cool.

Cross-Site Scripting (XSS) attacks are often misunderstood as harmless glitches that display alerts in the browser, while in actuality they are one of the most powerful and malicious vulnerabilities ...