XSF: Cross Site Flashing
Stefano Di Paola presented an interesting paper on Flash security at OWASP 2007 which highlights the dangers of HTML being rendered from within Flash via GET querystrings. Of particular note is the non-sanitization of comments (filter evasion by // .jpg) so check it out.
XSF: Cross Site Flashing was originally published by Martin Paul Eve at eve.gd: Martin Paul Eve on May 19, 2007.
Files
10.59348_eyyc4-zmm80.pdf
Files
(95.1 kB)
| Name | Size | Download all |
|---|---|---|
|
md5:e9ecd65b95fb7192b5833a8e7f878556
|
95.1 kB | Preview Download |
Additional details
Description
Stefano Di Paola presented an interesting paper on Flash security at OWASP 2007 which highlights the dangers of HTML being rendered from within Flash via GET querystrings. Of particular note is the non-sanitization of comments (filter evasion by // .jpg) so check it out. XSF: Cross Site Flashing was originally published by Martin Paul Eve at eve.gd: Martin Paul Eve on May 19, 2007.
Identifiers
- GUID
- https://doi.org/10.59348/eyyc4-zmm80
- URL
- https://eve.gd/2007/05/19/xsf-cross-site-flashing/
Dates
- Issued
-
2007-05-19T00:00:00Z
- Updated
-
2007-05-19T14:14:38Z