Re: cross site exploits

[Michal Zalewski <lcamtuf () DIONE IDS PL>]

On Sun, 17 Dec 2000, Lincoln Yeoh wrote:

> HTTP-Referer can help, but less so if the attacks can be placed on
> your site.

Can be in most cases. Any verbose error messages coming from scripts
("unable to parse query <blahblah>"), verbose "not found" pages ("cannot
access <blahblah>") and so on - everywhere attacker might insert external
html code to launch frame or so with "good looking" http-referer.

--
_______________________________________________________
Michal Zalewski [lcamtuf () tpi pl] [tp.internet/security]
[http://lcamtuf.na.export.pl] <=--=> bash$ :(){ :|:&};:
=--=> Did you know that clones never use mirrors? <=--=