Can a google ad on a webpage scrape content from the current page?

Question

• Can a google ad on a webpage access the html of the page?
• Can it inject scripts to the page?
• Does it matter if the page is served using https or not?

Answer 1

1. Can a google ad on a webpage access the html of the page?

   • The google code can. Like any JavaScript code on your page can. We may suppose that Google do not allow their advertisers to do something like that.

2. Can it inject scripts to the page?

   • Again, the JavaScript code can do it. Like you can write document.write and script tags... but let's suppose that Google will forbid their advertisers of doing so.

3. Does it matter if it's https or not?

   • No. That's on the protocol level, I suppose Google serves everything over TLS, anyway it does not matter.

edit What I mean is that the way the traffic is sent to the user computer (encrypted with TLS or not) does not affect what a script can or can't do... well in some browsers there may be restrictions when there is mixed content