13 ms·
Wasn't there this case of a security issue coming from abusing different parsers, in different places? Server, client, or different browsers
by furstenheim 2y ago
Wasn't there this case of a security issue coming from abusing different parsers, in different places? Server, client, or different browsers
- masklinn 2y agoYes, it's actually a pretty common issue: https://langsec.org/spw23/papers/Ali_LangSec23.pdf https://langsec.org/spw23/papers/Ali_LangSec23.pdf Examples: https://about.gitlab.com/blog/2020/03/30/how-to-exploit-parser-differentials/ https://about.gitlab.com/blog/2020/03/30/how-to-exploit-pars... https://gitlab-com.gitlab.io/gl-security/security-tech-notes/security-research-tech-notes/devfile/ https://gitlab-com.gitlab.io/gl-security/security-tech-notes...