开发者

Self-contained XSS

is there a way to exp开发者_StackOverflowloit the victims through Self-contained XSS, XSS vulnerabilities which are protected by CSRF protections based on login credential ??

Thanks


Assuming that self-contained XSS is a data: URI containing HTML with JS, then no.

data: URIs are considered to have unique origin, which is different from all other origins.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜