Timeline for XSS via REQUEST_URI
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 22, 2015 at 11:03 | comment | added | Nektro |
Yes, but you can use server-side code to prevent it. You could use something more to the effect of <form action=' . $action . ' onhover= ... This would only grab the URL
|
|
| Mar 22, 2015 at 3:59 | comment | added | Simon | The point of XSS is that you do not have access to the server-side code. | |
| Mar 22, 2015 at 0:54 | review | First posts | |||
| Mar 22, 2015 at 1:06 | |||||
| Mar 22, 2015 at 0:52 | history | answered | Nektro | CC BY-SA 3.0 |