3 ms·
That page, and the linked browsersec pages on Google Code, are terrifying. Time to burn it all down and start from scratch. I was particularly stunned to learn
by nly 13y ago
That page, and the linked browsersec pages on Google Code, are terrifying. Time to burn it all down and start from scratch.
I was particularly stunned to learn HTTP Cookie headers can clobber 'secure' cookies set over HTTPS. Eye-popping.
- wglb 13y agoAnd to increase your terror, check out http://lcamtuf.coredump.cx/postxss/ http://lcamtuf.coredump.cx/postxss/