Apple Safari XMLHttpRequest object header injection
Published:		25.06.2007
Source:		FULL-DISCLOSURE
SecurityVulns ID:		7848
Type:		client
Level:		3/10
Description:		It's possible to inject additional headers into XMLHttpRequest object's request.

Affected:

APPLE : Safari 3.0

Original document

Richard Moore, [Full-disclosure] Safari XMLHttpRequest HTTP header injection (25.06.2007)

Discuss:

Read or add your comments to this news (0 comments)