3 ms·
There is an exploit made possible by returning 'unwrapped' json in response to GET's. This details it fairly nicely: http://haacked.com/archive/2008/11/20/anato
by randomaccount5 14y ago
There is an exploit made possible by returning 'unwrapped' json in response to GET's. This details it fairly nicely: http://haacked.com/archive/2008/11/20/anatomy-of-a-subtle-json-vulnerability.aspx http://haacked.com/archive/2008/11/20/anatomy-of-a-subtle-js...