• info
• discussion
• exploit
• solution
• references

Mozilla XMLSerializer Same Origin Policy Violation Vulnerability

A proof-of-concept can be found at the following location:

http://www3.sympatico.ca/ndeakin/test/sectest.html