4 ms·

What's the definition of "user content"?

• homakov 13y ago
  Untrustworthy scripts, HTML, images, email attachments.
  • ororlrlrlylyly 13y ago
    But I'm logged in! It shows myname in the corner. So obviously you could get that cookie, right?
    • homakov 13y ago
      Part with yourname is other_origin. I change content of GUC Page 2 using GUC Page 1 through other_origin (translate.google.com). No XSS or cookies. Just standards :D
      • mh- 13y ago
        I seriously admire your patience in replying to comments.
        • homakov 13y ago
          I have no life.
          • mh- 13y ago
            I was only referring to your continuing lengthy, polite comments when replying to commenters' questions. :)
            • homakov 13y ago
              :) it's pleasant to explain hacks you discover. actually PoC is fixed - http://homakov.blogspot.com.es/2013/07/googleusercontentcom-fun-or-snowden-is.html http://homakov.blogspot.com.es/2013/07/googleusercontentcom-...