@X_Cli to Security • 2 years agoXSS vulnerability in Firefox via a SVG imagetutanota.comexternal-linkmessage-square2arrow-up18arrow-down10file-text
arrow-up18arrow-down1external-linkXSS vulnerability in Firefox via a SVG imagetutanota.com@X_Cli to Security • 2 years agomessage-square2file-text
The attack scenario is not very realistic, but the details of the attack and why it caused a XSS are fascinating
minus-square@X_CliOPlink1•edit-22 years agoIMO, blob URLs should be completely disabled. They are the main issue here, because they are executed in the context of the origin that created the blob in the first place. https://github.com/whatwg/url/issues/127
IMO, blob URLs should be completely disabled. They are the main issue here, because they are executed in the context of the origin that created the blob in the first place.
https://github.com/whatwg/url/issues/127