News for hackers. Stuff that matters.

A comment on Apple.com XSS attack.

Re:Apple.com XSS attack by makecheck on Tuesday November 03, 2009 @06:14PM (#920490)
Pretty much anything works; such as this. :)

http://www.apple.com/itunes/affiliates/download/?artistName=...

[ Parent | on HN ]
Re:Apple.com XSS attack by NathanKP on Tuesday November 03, 2009 @06:18PM (#920498)
Yep you can do just about anything that you want.

http://www.apple.com/itunes/affiliates/download/?artistName=...

I'm sure that when Apple finds this they'll close the gap pretty fast though.

[ Parent | on HN ]
Re:Apple.com XSS attack by martian on Tuesday November 03, 2009 @07:14PM (#920575)
Looks like they already did. For Posterity, here's a screenshot:

http://visualmotive.com/etc/apple_xss.png

[ Parent | on HN ]