[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: Bypassing of web filters by using ASCII
Amit Klein wrote Thursday, June 22, 2006 3:47 AM
> So in order to exploit this in HTML over HTTP, the attacker needs to
either add/modify the Content-Type response header, or to add/modify the
META tag in the HTML page.
There are other ways that might carry a bigger injection threat:
By extension, it should also work for inline styles.