Full Disclosure mailing list archives

Re: Safari Address Spoofing (How We Got It)


From: Michal Zalewski <lcamtuf () coredump cx>
Date: Tue, 2 Jun 2015 08:59:30 -0700

If you change "http://1.2.3.4/"; in your Safari code:
some URL in the real world(for example, dailymail.co.uk).
Your code won't work(page of target domain is simply loaded).

Sure, but that's pretty obvious.

/mz

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/


Current thread: