News for hackers. Stuff that matters.

A comment on I just discovered major security flaws in my web store. Parent comment

Re:I just discovered major security flaws in my web store by yahelc on Thursday July 28, 2011 @10:14AM (#2816853)
You can send custom HTTP headers from the browser with XMLHTTPRequest, commonly referred to as AJAX. Not totally sure if this is what the poster is referring to, but its possible.
[ Parent | on HN ]
Re:I just discovered major security flaws in my web store by tedunangst on Thursday July 28, 2011 @12:30PM (#2817576)
ok, I didn't think a payment processor would be using a cross domain xmlhttprequest, but I don't know a lot about it.
[ Parent | on HN ]