Postcards from the post-XSS world

Postcards from the post-XSS world (2011) Michal Zalewski, <lcamtuf@coredump.cx> 1. Introduction HTML markup injection vulnerabilities are one of the most significant and pervasive threats to the security of web applications. They arise whenever, in the process of generating HTML documents, the underlying code inserts attacker-controlled variables into the output stream without properly screening t

[efcl]

XSS後の攻撃手段などについて

[teppeis]

XSSを使わずに情報を取得する手法

[hasegawayosuke]

あとで

[fcicq]

injections everywhere ...