3 ms·
None of these "exploits" really sound much more dramatic than using a database without transactions
by woah 10y ago
None of these "exploits" really sound much more dramatic than using a database without transactions
- goldenkey 10y agoActually it's much worse, it's the equivalent of calling a function that ends up doing something totally different than you thought it would. Very reminiscent of a web bug that has since been blocked by newer browsers: parsing JSON data that ends up using a constructor redefinition exploit to execute arbitrary JS. Pretty much this: http://www.thespanner.co.uk/2011/05/30/json-hijacking/ http://www.thespanner.co.uk/2011/05/30/json-hijacking/