News for hackers. Stuff that matters.

A comment on Billion laughs attack.

Re:Billion laughs attack by robko on Sunday January 06, 2019 @05:38PM (#18841197)
Interestingly, many browsers are still susceptible to this attack, for example when used in SVG files (WARNING: might crash your browser and/or operating system): https://jsfiddle.net/e3guLn08/
[ Parent | on HN ]
Re:Billion laughs attack by kazinator on Monday January 07, 2019 @06:25AM (#18844371)
Browsers are susceptible to a server that generates an infinite HTML page (e.g. CGI shell script calling "yes <arg>"), and also to thing called JavaScript that can eat all your memory programmatically (and does exactly so on a regular basis).
[ Parent | on HN ]