Tag Info

New answers tagged


Malicious JavaScript could trigger calls against any SSL server. Although this JavaScript is not able to actually read the cookie for that server directly, the browser will send that cookie through the SSL tunnel. The JavaScript will then alter the URL, keeping the server but changing the path or request parameters. In that way it can inject data before ...

Top 50 recent answers are included