394 reputation
213
bio website
location
age
visits member for 2 years, 2 months
seen Jun 26 at 22:12

ca51ce1fb15acc6d69b8a5700256172fcc507e02073e6f19592e341bd6508ab8


Oct
7
accepted Where and How is data stored in a session?
Oct
4
accepted Is there a method to detect an active man-in-the-middle?
Sep
30
asked Is there a method to detect an active man-in-the-middle?
Sep
21
awarded  Custodian
Sep
19
comment From a technical standpoint, how does the zero-day Internet Explorer vulnerability discovered in September 2012 work?
Seems like a buffer overflow.
Sep
16
reviewed Reviewed Low level attacks on WLAN/LAN connection while connected to VPN
Sep
15
revised Is there a term for a “Master + extension” style password scheme?
added 1 characters in body
Sep
14
accepted Is Window's system restoration useful for getting rid of malware?
Sep
14
answered Is there a term for a “Master + extension” style password scheme?
Sep
14
asked Is Window's system restoration useful for getting rid of malware?
Sep
5
accepted Is not checking the src url a vulnerability?
Aug
31
answered Current best practices to prevent persistent XSS attacks
Aug
31
comment Is not checking the src url a vulnerability?
And, apart from CSRF, are there other ways to exploit it?
Aug
30
comment Is not checking the src url a vulnerability?
It sanitizes, I updated the question to show how. BTW I made a little mistake, img tag does not have the href attribute, it is src ;)
Aug
30
comment Is not checking the src url a vulnerability?
I edited the question, now you can see how it is done. BTW I made a little mistake, img tag does not have the href attribute, it is src ;)
Aug
30
revised Is not checking the src url a vulnerability?
added 533 characters in body; edited tags
Aug
30
revised Is not checking the src url a vulnerability?
deleted 1 characters in body; edited title
Aug
30
comment Is not checking the src url a vulnerability?
@adric I mean, if you let the user to introduce any valid url in the href, could it be exploited?
Aug
30
revised Is not checking the src url a vulnerability?
added 4 characters in body
Aug
30
asked Is not checking the src url a vulnerability?