5 ms·

ITunes website open to HTML injection...again (lgt example). [WARNING: autoplay]

• blhack 17y ago
  Credit to SSChicken who pointed this out in a reddit comment thread. Permalink to their commment: http://www.reddit.com/r/technology/comments/a5osy/oh_apple_when_will_you_learn/c0fypfm http://www.reddit.com/r/technology/comments/a5osy/oh_apple_w...
• tptacek 17y ago
  And this is interesting because...?
  • roc 17y ago
    Because we'd like to think professionals (particularly those who flog their platforms' security) would validate their input, in this, the year 2009.
    • tptacek 17y ago
      What vendor has not had similar problems in 2009? What's the vendor that says negative things about their own security?
  • alex_c 17y ago
    To me, it's interesting that Apple doesn't seem to have performed an audit (or hell, a search&replace) after the first time this came up. Fool me once...
• blhack 17y ago
  Well, it looks as though they have fixed it for now. Apple, this is depressing.
• calebgilbert 17y ago
  Somehow I never tire of these. :-)