Xsstc: Cross-site scripting through CSS data

Ajax Blogs - 127 days ago Posted by bluray

Wes Biggs has posted on Xsstc, his cross-site scripting solution that uses CSS to hide the data:

It turns out CSS leaks data in a very subtle way. Properties set by an external stylesheet (that is, one that is loaded using a LINK REL="STYLESHEET" tag) are used to style the elements of th

Comment  Vote 1 votes  Tell a friend 

Log in to comment or register here.

Comments

Related Links

  1. CrossSafe: Secure Cross Domain JSON
  2. Premature Ajax-ulations: Ajax Security… It’s Still The Web
  3. Honeypot Captcha
  4. Joe Walker on Web Application Security
  5. What’s in a window.name?
  6. crossdomain.xml misconfigurations galore
  7. TLS Report: Best and Worst Security Charts
  8. ratproxy: Rat out those security issues in your Web app
  9. Evil GIFs: Hiding Java in your image
  10. IE 8 Security and nosniff

Who voted for this story

Categories

Get your Certification Practice Tests and Assessments at MeasureUp! Prepare for Certification with MeasureUp!
Ajax Blogs