Together with the server-side stripslash() php function this call slips through the IE8 XSS filters because it strips the slashes server side and such evades IE8 detection when the HTTP request is being sent by IE8:
See: http://www.0x000000.com/?i=634
Friday Squid Blogging: Squid Washing Up on Cape Cod Beach
-
Lots of articles about this.
As usual, you can also use this squid post to talk about the security
stories in the news that I haven’t covered.
Blog mode...
23 hours ago


0 comments
Post a Comment