News for hackers. Stuff that matters.

A comment on Five Minute Guide to Software Security.

Re:Five Minute Guide to Software Security by wnevets on Friday October 13, 2017 @04:23PM (#15468972)
>Ensure use of Anti-CSRF tokens, CORS, and crossdomain.xml policies to prevent an attacker from forcing a user to submit authenticated requests.

isn't crossdomain.xml an adobe flash thing?

[ Parent | on HN ]
Re:Five Minute Guide to Software Security by jsegura on Friday October 13, 2017 @05:17PM (#15469304)
In theory it was designed for any "web client" [1] but it designed for Flash.

Just for curiosity, you can check twitter's [2]

[1]: http://www.adobe.com/devnet/adobe-media-server/articles/cros... [2]: https://twitter.com/crossdomain.xml

[ Parent | on HN ]