Exploits Spy

I was reading an interesting blog post on Billy Rios Blog about new Google XSS found in Google spreadsheet.In the specific, that XSS is in my opinion to blame more to Internet Explorer, the only vulnerable browser to this XSS, than to Google itself.
The javascript injection is caused by Internet Explorer rendering text/plain as active content that is HTML. Indeed Billy just created a link to the spreadheet in CSV format. The spreadsheet contains a javascript snippet […]

Read the rest here:
Exploiting browsers mental diseases

This entry was posted on Tuesday, April 15th, 2008 at 11:00 pm and is filed under Exploit. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.