Re: CSS implication

[zero <zeroboy () arrakis es>]

At 10:14 a.m. 16/03/2002 -0800, you wrote:
> The implications are very simple. With XSS, one can control a target users
> browser to make it do whatever they want it to do.

Although that's true, many times, you just can execute code through special 
crafted urls. So, users aren't directly affected. I mean, the code you 
inject doesn't gets executed as in normal forum CSS. You can use this kind 
of links in social engineering attacks or there are more implications?


mailto:zeroboy () arrakis es
http://www.podergeek.com
http://www.citfi.org
**************************************************
"The further backward you look, the further forward you can see" Winston 
Churchill
 "Para ganar, hay gente que debe perder"