4 ms·
DNS rebinding attacks is probably one of them.
by LunaSea 6y ago
DNS rebinding attacks is probably one of them.
- belorn 6y agoBrowsers will need to update their same-origin policy so that a change in IP address will block same requesting a different site under a different name.
- LunaSea 6y agoDNS rebinding attacks also work in non-browser environments like SSRF attacks.
- philsnow 6y agoThis would mean that long-lived single page web apps would need to be hard-refreshed every once in a while when, through no fault of the app developer, all the IP addresses that their domain name resolves to have rotated.