3 ms·
I'm a bit confused by your threat model - you use SSL but the attacker is able to get your webserver to output arbitrary data? Most web applications that can be
by JoachimSchipper 15y ago
I'm a bit confused by your threat model - you use SSL but the attacker is able to get your webserver to output arbitrary data? Most web applications that can be persuaded to output arbitrary data can also be persuaded to, say, output the entire database - and no amount of session cookie trickery is going to help you there...
- espeed 15y agoLook at: 1. Cross-site scripting (XSS -http://en.wikipedia.org/wiki/Cross-site_scripting http://en.wikipedia.org/wiki/Cross-site_scripting) 2. Cross-site forgery (http://en.wikipedia.org/wiki/Cross-site_request_forgery http://en.wikipedia.org/wiki/Cross-site_request_forgery) It doesn't necessarily mean the attacker has compromised the server, but they may have been able to post code to a page, e.g. through a form posting.