Reputation
1,379
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
7 13
Newest
 Enlightened
Impact
~107k people reached

  • 0 posts edited
  • 0 helpful flags
  • 40 votes cast
Apr
20
answered exploiting XSS in jQuery selector
Mar
21
awarded  Enlightened
Mar
21
awarded  Nice Answer
Mar
18
revised How can I execute a XSS when a web application transforms a data from lowercase to uppercase?
added 12 characters in body
Mar
18
answered How can I execute a XSS when a web application transforms a data from lowercase to uppercase?
Nov
11
awarded  Yearling
Nov
3
awarded  Editor
Nov
3
revised How can I prevent reflected XSS in my JSON web services?
edited body
Aug
29
awarded  Popular Question
Nov
11
awarded  Yearling
Sep
24
awarded  Autobiographer
Feb
26
answered Is SSL a mitigating factor for HTTPonly not set on cookies?
Nov
11
awarded  Yearling
Nov
5
answered Tracing security policy permissions in JavaScript
Sep
26
awarded  Commentator
Sep
26
comment Flash ignores Content-Type header, allowing XSS?
Seems to me flash will only execute given the correct content-type these days (the frame with "Not Found" ran the flash) research.insecurelabs.org/flash
Sep
26
comment Flash ignores Content-Type header, allowing XSS?
Nope, hence the use of the word "might".
Sep
25
answered Flash ignores Content-Type header, allowing XSS?
Jun
12
comment Why is the Samy Worm considered XSS?
It is in a sense cross site. The script came from Samy, not myspace.
Apr
1
comment bypass a regex filtration to perform an xss attack
If var is user controlled, that line allows arbitrary script injection. Why would you want to load a script specified by the user?