2 ms·
Browsers will need to update their same-origin policy so that a change in IP address will block same requesting a different site under a different name.
by belorn 6y ago
Browsers will need to update their same-origin policy so that a change in IP address will block same requesting a different site under a different name.
- LunaSea 6y agoDNS rebinding attacks also work in non-browser environments like SSRF attacks.
- philsnow 6y agoThis would mean that long-lived single page web apps would need to be hard-refreshed every once in a while when, through no fault of the app developer, all the IP addresses that their domain name resolves to have rotated.