Web Application Security
Back to list
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
Re: CSS before redirect
Sep 08 2003 04:20PM
Jeremiah Grossman (jeremiah whitehatsec com)
In the course of hunting down cross-site scripting, one is bound to
find what I have loosely referred to as "unusable" XSS (bad name).
As most are familiar, XSS is very browser dependent.
Specifically in this case, your browser is likely not interpreting the
HTML on a 302
response code. Why wou...
[ more ]
Privacy Statement
Copyright 2010, SecurityFocus
find what I have loosely referred to as "unusable" XSS (bad name).
As most are familiar, XSS is very browser dependent.
Specifically in this case, your browser is likely not interpreting the
HTML on a 302
response code. Why wou...
[ more ]