Together with the server-side stripslash() php function this call slips through the IE8 XSS filters because it strips the slashes server side and such evades IE8 detection when the HTTP request is being sent by IE8:
See: http://www.0x000000.com/?i=634
Friday Squid Blogging: Jurassic Fish Chokes on Squid
-
Here’s a fossil of a 150-million year old fish that choked to death on a *belemnite
rostrum*: the hard, internal shell of an extinct, squid-like animal.
...
23 hours ago


0 comments
Post a Comment