« Return to Thread: Re: Origin enables XSS to escalate to XSRF (was: security issue with XMLHttpRequest API compatibility)

Re: Origin enables XSS to escalate to XSRF (was: security issue with XMLHttpRequest API compatibility)

by Mark S. Miller-2 :: Rate this Message:

Reply to Author | View in Thread

I started this thread with a large recipient list so that others I expect to be interested would be aware of it. All further messages on this thread should occur only on <public-webapps@...>. I will direct all my further replies only there.

Sorry for any unnecessary or inappropriate noise.

--
Cheers,
--MarkM

« Return to Thread: Re: Origin enables XSS to escalate to XSRF (was: security issue with XMLHttpRequest API compatibility)