Inline UTF-7 E4X javascript hijacking - The SpannerPublished: Tue, 24 Feb 2009 11:27:19 GMT Updated: Wed, 02 Jul 2025 20:02:07 GMT Read time: ⏱️ 2 min read I finally get to talk about this because Yosuke Hasegawa has already disclosed the IE/FF variant with JSON data. I also discovered the UTF-7 JSON hacking independently but I wasn't aware it was public so I didn't blog about it. Just in case you haven't, you should check out his presentation it'
