Firefox's ability to process the Data URL Scheme can lead to XSS

Previous | Next

If you want it done right, do it yourself! Login and vote now.

By aaron102degrees
via 102degrees.com
Submitted: Mar 17 2008 / 22:13

Firefox's ability to process the Data URL Scheme can lead to XSS

While trying to develop a PHP script with no need for that dreaded 'images' directory, I experimented with the Data URL scheme. I got to thinking - what if you encoded a javascript code segment like you encode an image... Well, it was successful. Click through to see my results.

Vote up

Vote down