Simon Willison’s Weblog

Subscribe
Atom feed for arturbergman

1 item tagged “arturbergman”

2007

Your browser is a tcp/ip relay. Thoroughly nasty new(ish) attack that breaks the same-domain policy and allows intranet content to be stolen by a malicious site. Using virtual hosts (hence requiring the Host: header) is the best known protection.

# 2nd August 2007, 12:53 pm / arturbergman, dnsrebinding, samedomain, security