|
|
BugTraq
Bypassing of web filters by using ASCII Jun 21 2006 01:11PM k huwig iku-ag de (4 replies) Re: Bypassing of web filters by using ASCII Jun 22 2006 10:08PM Amit Klein (AKsecurity) (aksecurity hotpop com) Re: Bypassing of web filters by using ASCII Jun 22 2006 02:57PM Hubert Seiwert (hubert westpoint ltd uk) Re: Bypassing of web filters by using ASCII Jun 21 2006 11:57PM RSnake (rsnake shocking com) (2 replies) Re: Bypassing of web filters by using ASCII Jun 21 2006 08:15PM Fixer (fixer gci net) (1 replies) Re: Bypassing of web filters by using ASCII Jun 21 2006 10:24PM Paul (pvnick gmail com) (3 replies) Re: Bypassing of web filters by using ASCII Jun 22 2006 07:46AM Amit Klein (AKsecurity) (aksecurity hotpop com) (1 replies) Re: Bypassing of web filters by using ASCII Jun 22 2006 03:40AM Thor (Hammer of God) (thor hammerofgod com) |
|
Privacy Statement |
> So in order to exploit this in HTML over HTTP, the attacker needs to
either add/modify the Content-Type response header, or to add/modify the
META tag in the HTML page.
There are other ways that might carry a bigger injection threat:
Style sheet:
http://msdn.microsoft.com/library/default.asp?url=/workshop/author/dhtml
/reference/properties/charset_1.asp
Object property:
http://msdn.microsoft.com/library/default.asp?url=/workshop/author/dhtml
/reference/properties/charset.asp
By extension, it should also work for inline styles.
[ reply ]