Web Application Security
Back to list
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
Re: Whitepaper "SESSION RIDING - A Widespread Vulnerability in Today's Web Applications"
Dec 17 2004 08:36AM
Philippe P. (webappsec philippe prados name)
Hello,
I like this paper ( http://www.securenet.de/papers/Session_Riding.pdf ), but
i would like to make some comments:
- In chapter 6.3.1, you say a javascript can help to submit the URL 1) and
the URL 2).
I think it's not necessary to use javascript for that. It's possible to
return a spec...
[ more ]
Privacy Statement
Copyright 2010, SecurityFocus
I like this paper ( http://www.securenet.de/papers/Session_Riding.pdf ), but
i would like to make some comments:
- In chapter 6.3.1, you say a javascript can help to submit the URL 1) and
the URL 2).
I think it's not necessary to use javascript for that. It's possible to
return a spec...
[ more ]