sla.ckers.org web application security forum :: XSS Info :: XSS in XML files.. I didin't knew it :-/While reading this I thought that it may be a way of including a namespace as XML.. and while I was investigating, I found this.. http://www.w3.org/TR/REC-xml-names/#scoping When I saw that, I immediatelly tried it out.. so, if theres a way of including XML code, you are doomed hehe :P Here is the .xml file PoC to try it out [warzone.elhacker.net] The interesting thing is the code..
