funsec mailing list archives

Google Gears cross-origin communication vulnerablity reported


From: Juha-Matti Laurio <juha-matti.laurio () netti fi>
Date: Tue, 9 Dec 2008 12:35:53 +0200 (EET)

Breaking Google Gears' Cross-Origin Communication Model by Yair Amit:
http://blog.watchfire.com/wfblog/2008/12/breaking-google-gears-cross-origin-communication-model.html

The report says that there is a fix available.

http://code.google.com/apis/gears/history.html

Juha-Matti
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: