2 ms·
The PNG bit was my favorite. That's just wild.
by wccrawford 15y ago
The PNG bit was my favorite. That's just wild.
- psykotic 15y agoYeah. The dual file format trick reminded me of the GIFAR exploit where you take advantage of the fact that GIFs are header-based and JARs are footer-based. In the present case, one format (PNG) is header-based and the other format (HTML) is headerless and generally tolerant of weird data.