Timeline for XSS from image upload - does cropping solve most issues?
Current License: CC BY-SA 3.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| S Mar 22, 2016 at 19:37 | history | edited | Mike Ounsworth | CC BY-SA 3.0 |
I made minor improvements to the capitalization, punctuation, and grammar.
|
| S Mar 22, 2016 at 19:37 | history | suggested | Omniwombat | CC BY-SA 3.0 |
I made minor improvements to the capitalization, punctuation, and grammar.
|
| Mar 22, 2016 at 19:34 | review | Suggested edits | |||
| S Mar 22, 2016 at 19:37 | |||||
| Mar 21, 2016 at 21:19 | answer | added | Omniwombat | timeline score: 2 | |
| Mar 9, 2016 at 10:19 | comment | added | user2330270 | always say mere! shift the blame! ha. I cant show code it's not my own. Sanitize what exactly? | |
| Mar 9, 2016 at 9:44 | comment | added | TheHidden | do you sanitise? I cant tell if there would be an issue without seeing some code my friend! (I am a developer also! dont say mere :< ) | |
| Mar 9, 2016 at 8:53 | comment | added | Matthew | For PNG images, resizing doesn't always remove iTXt chunks, so if there are ways of embedding usable code in those, it will theoretically remain usable after resize. I know of ways to abuse this with PHP, but I'm not an ASP.NET expert, so don't know if there is a comparable way. | |
| Mar 9, 2016 at 8:31 | review | First posts | |||
| Mar 9, 2016 at 8:31 | |||||
| Mar 9, 2016 at 8:29 | history | asked | user2330270 | CC BY-SA 3.0 |