Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Web Application Security
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: CSS before redirect Sep 08 2003 04:20PM
Jeremiah Grossman (jeremiah whitehatsec com)
In the course of hunting down cross-site scripting, one is bound to
find what I have loosely referred to as "unusable" XSS (bad name).

As most are familiar, XSS is very browser dependent.

Specifically in this case, your browser is likely not interpreting the
HTML on a 302
response code. Why wou...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus