4 ms·
>Is this RoR specific because RoR will always allow JSON responses to be turned into JSONP, or is there something else at work? you can't turn any JSON into JS
by homakov 13y ago
>Is this RoR specific because RoR will always allow JSON responses to be turned into JSONP, or is there something else at work?
you can't turn any JSON into JSONP. No, JSONP here is result of using RJS templates. It has nothing to do with original JSONP
- KayEss 13y agoExcept inasmuch as you're using a framework that allows any JSON data to also be requested as JSONP. The very first site I checked on this (which uses DjangoRestFramework) I was able to access email addresses from an attack page. This is purely due to DRF handling the JSONP for you without the devs really being aware of what was going on.
- homakov 13y agothis is slightly different vulnerability (JSON->JSONP upgrade) but it's really severe. Good find!