You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
Today at 11:15AM EDT, the jQuery Infrastructure team received widespread reports and confirmed a compromise of jquery.com. This attack was aimed at defacing our sites, and did not inject malware like the attack that was reported on September 18th by RiskIQ. We believe that these are separate incidents that may have used the same attack vector. We took the site down as soon as we realized there was
Lastest update on the compromise: Update on jQuery.com Compromises Earlier today, RiskIQ published a blog post stating that the jQuery.com web servers were compromised and serving the RIG exploit kit for a short period of time on the afternoon of September 18th. Our internal investigation into our servers and logs have not yet found the RIG exploit kit or evidence that there was in fact a compromi
いくつかのサイトで実際に遭遇してますが,jQueyr 1.6.3 で解決( jQuery Bug #9521 )したはずの $("a[href=" + hash + "]") タイプの XSS が ( 2013/11/18 現在 1.2.1 を含む全ての) jQuery Migrate Plugin で復活します. jQuery 1.6.3 のみの場合 jQuery 1.10.2 と Migrate Plugin 1.2.1 の場合 色々追ってみて,やっぱりまだ動くけどと言ったら,8月にすでに,実際バグだけどこれで想定通りなんだと言われてた(He told me that this was not, in fact, a bug, but was working as intended.) のでそういうことだったみたいです. jQuery 本体側の変遷 jQuery の $() には複数の
or How "jQuery Migrate" un-fixes a nasty DOMXSS without telling us.. Foreword Today Mario Heiderich of Cure53 tweeted the following message: "@0x6D6172696F Does anyone know why jquery.com has a special jQuery 1.9.1 version that is still vulnerable to $(location.hash)?" What happened after that message might be considered to be the discovery of a rather interesting bug - which Mario and me will try
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
処理を実行中です
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く