Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
2 replaced http://security.stackexchange.com/ with https://security.stackexchange.com/
source | link

BlenderBlender makes a very good point about authentications dialogs, and korockinout13korockinout13 is right about the on attributes. I have one addition, though.

In some situations you can use control of images to change the layout of the page, and faking parts of the page. It is not very powerful since I can't do anything dynamic, but it can be used in clever ways sometimes.

For example, if I can insert an img tag in the search result page by searching for one, I could have an image with fake search results in it included. That way I could make it look like a search for "UFO" on the local news returns stories about the great alien landing of 2016.

If the vulnerability is inside an a tag that performs an action, I could insert an image mimicing other parts of the page. That way, when the user clicks "OK" she is actually clicking on my image that contains a depiction of a fake "OK" button, but is actually part of the "Delete" link.

If I can create my own links with images in them, this gets even better...

As I said, not the most powerful hack in the world, but reason enough not to allow images where they are not needed.

Blender makes a very good point about authentications dialogs, and korockinout13 is right about the on attributes. I have one addition, though.

In some situations you can use control of images to change the layout of the page, and faking parts of the page. It is not very powerful since I can't do anything dynamic, but it can be used in clever ways sometimes.

For example, if I can insert an img tag in the search result page by searching for one, I could have an image with fake search results in it included. That way I could make it look like a search for "UFO" on the local news returns stories about the great alien landing of 2016.

If the vulnerability is inside an a tag that performs an action, I could insert an image mimicing other parts of the page. That way, when the user clicks "OK" she is actually clicking on my image that contains a depiction of a fake "OK" button, but is actually part of the "Delete" link.

If I can create my own links with images in them, this gets even better...

As I said, not the most powerful hack in the world, but reason enough not to allow images where they are not needed.

Blender makes a very good point about authentications dialogs, and korockinout13 is right about the on attributes. I have one addition, though.

In some situations you can use control of images to change the layout of the page, and faking parts of the page. It is not very powerful since I can't do anything dynamic, but it can be used in clever ways sometimes.

For example, if I can insert an img tag in the search result page by searching for one, I could have an image with fake search results in it included. That way I could make it look like a search for "UFO" on the local news returns stories about the great alien landing of 2016.

If the vulnerability is inside an a tag that performs an action, I could insert an image mimicing other parts of the page. That way, when the user clicks "OK" she is actually clicking on my image that contains a depiction of a fake "OK" button, but is actually part of the "Delete" link.

If I can create my own links with images in them, this gets even better...

As I said, not the most powerful hack in the world, but reason enough not to allow images where they are not needed.

1
source | link

Blender makes a very good point about authentications dialogs, and korockinout13 is right about the on attributes. I have one addition, though.

In some situations you can use control of images to change the layout of the page, and faking parts of the page. It is not very powerful since I can't do anything dynamic, but it can be used in clever ways sometimes.

For example, if I can insert an img tag in the search result page by searching for one, I could have an image with fake search results in it included. That way I could make it look like a search for "UFO" on the local news returns stories about the great alien landing of 2016.

If the vulnerability is inside an a tag that performs an action, I could insert an image mimicing other parts of the page. That way, when the user clicks "OK" she is actually clicking on my image that contains a depiction of a fake "OK" button, but is actually part of the "Delete" link.

If I can create my own links with images in them, this gets even better...

As I said, not the most powerful hack in the world, but reason enough not to allow images where they are not needed.