Reputation
351
Top tag
Next privilege 500 Rep.
Access review queues
Badges
1 3 13
Newest
 Caucus
Impact
~43k people reached

  • 0 posts edited
  • 0 helpful flags
  • 2 votes cast
Feb
6
comment Are .NET WebServices vulnerable to CSRF?
Fair enough, I will :) Thx for the help
Feb
6
comment Are .NET WebServices vulnerable to CSRF?
In terms of the use of ActionScript, that is the only vector that looks like might work, BUT, only if one can set the ContentType to application/json (for example some browsers do allow the manipulation of content type via form submission, BUT only to a set of values (i.e. not to application/json))
Feb
6
comment Are .NET WebServices vulnerable to CSRF?
Hi Rook, I just updated the original question to add details about where you can get the Source Code of the app (in case you want to take a look at it)