4 ms·
They're interesting and often-overlooked techniques, but are not novel. You can read a more about these sorts of attacks and other similar ones in 2011 writeup
by chias 10y ago
They're interesting and often-overlooked techniques, but are not novel. You can read a more about these sorts of attacks and other similar ones in 2011 writeup "Postcards from the post-XSS world"[0]
[0] http://lcamtuf.coredump.cx/postxss/ http://lcamtuf.coredump.cx/postxss/
- ptoomey3 10y agoIndeed, lcamtuf's article was a reference during this effort and was linked to in our CSP post last year: https://githubengineering.com/githubs-csp-journey/ https://githubengineering.com/githubs-csp-journey/