HNGlance

Top Best New Show

Anatomy of a Subtle JSON Vulnerability

http://haacked.com/archive/2008/11/20/anatomy-of-a-subtle-json-vulnerability.aspx

by ajbatac • 18 years ago

4 4 18 years ago

HA

Related Stories

Loading related stories...

Comments

4

teej• 18 years ago

Subtle? It's called Cross-Site Scripting and it's pretty well known. Hell, the Wikipedia entry (http://en.wikipedia.org/wiki/Cross-site_scripting#Cookie_sec...) even has some tips on how to secure against this particular case.

chrisbroadfoot• 18 years ago

Actually, this is CSRF (and it's pretty smart - smarter than your average XSS attack).

blasdel• 18 years ago

script src-ing the JSON document is pretty clever.

It could be totally stopped by using a nonce in a header. You should already have implemented a nonce system for form submissions anyway.

waynep• 18 years ago

JSON is not insecure, technically it's the browser here.

Source preview

haacked.com

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms