New answers tagged same-origin-policy
i tried many php scripts like http://attacker.com/omg.php and it doesn't runs the script on my domain .. The problem here would not be a server side vulnerability but more of a reflective XSS vulnerability that runs on the browser not on the server which is why the php file did not work. Taken from OWASP (see here): Reflected Cross-site Scripting (XSS)...
Top 50 recent answers are included