Shawn Lauriat's Profile

1

Thank you for this. I had commented as such on Bruce Schneier's blog link to which Brian Chess had replied somewhat to the effect that I had misunderstood how the attack worked, but it really does just seem to me that they found a quick and easy way of parsing the result of an already successful CSRF attack.

Posted in /blog/2007/apr/javascript-hijacking.

Fri, 06 Apr 2007 at 12:15:43: Link