Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Cross-Site Scripting vulnerabilities in Mozilla, Internet Explorer, Opera and Chrome Jul 03 2009 05:07PM
Michal Zalewski (lcamtuf coredump cx)
> refresh: 0; URL=javascript:alert(document.cookie)
> The code will work in context of this site.

...which happens to be covered here for half a year or so:
http://code.google.com/p/browsersec/wiki/Part2#Redirection_restrictions

I can't see how this could be a vulnerability per se, although
changi...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus