[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: CSRF (Was: XSS evasion)


Jonathan Vanasco wrote:
> > Unfortunately, Amit Klein published some research in July that
> > demonstrated how to do this with Flash. So, if your users use
> > clients that support Flash (which most do), this is not a good
> > safeguard.
> 
> Do you have a link to that?

http://webappsec.org/lists/websecurity/archive/2006-07/msg00069.html

Chris

-- 
Chris Shiflett
http://shiflett.org/


Mail converted by mhonarc 2.6.15
This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.