Bugtraq mailing list archives
countermeasure against attacks through HTML shared files
From: fcorella () pomcor com
Date: Fri, 07 Nov 2008 05:01:11 +0000
Hello, I wanted to announce a Pomcor white paper that looks at attacks through HTML shared files in Web applications and proposes a countermeasure. These are essentially XSS attacks, but the usual defenses against XSS are typically not available, because shared files cannot be sanitized. The paper is available at: http://www.pomcor.com/whitepapers/file_sharing_security.pdf I have not been able to find much prior work. What I've found is discussed in Section 2 of the paper. If I've missed something, please let me know. Thanks, Francisco Corella
Current thread:
- countermeasure against attacks through HTML shared files fcorella (Nov 07)
- Re: [WEB SECURITY] countermeasure against attacks through HTML shared files Adrian P. (Nov 07)
- Re: countermeasure against attacks through HTML shared files Peter Watkins (Nov 07)
- Re: [WEB SECURITY] countermeasure against attacks through HTML shared files Amit Klein (Nov 09)
- <Possible follow-ups>
- Re: countermeasure against attacks through HTML shared files fcorella (Nov 09)