Re: The Dangers of Allowing Users to Post Images

["Sverre H. Huseby" <shh () thathost com>]

(First, thanks a _lot_ for Squid, Henrik!)

[Henrik Nordstrom]

|   Further, if you pass around the ticket in URLs then this class of
|   attacks will also have full access to the ticket from the referer
|   URL, so if you only base your security on these two measurements
|   (client IP + ticket present in the URL) then your are most likely
|   at risk here.

There are, of course, no reason to add a ticket to off-site links.
The tickets are only understandable by our web application.

Tickets should only be tied to actions that have side effects on our
server (for which GET may be Wrong Thing anyway).  If this principle
is followed, I can't see how anyone would be able to pick up Referers
containing tickets without having access to our server.  Please
enlighten me if I've misunderstood anything here.


Sverre.

-- 
<URL:mailto:shh () thathost com>
<URL:http://shh.thathost.com/>