12 ms·
It's all possible with HTTP statuses according to a link[1] posted above. [1] https://grepular.com/Abusing_HTTP_Status_Codes_to_Expose_Private_Information http
by jlogsdon 12y ago
It's all possible with HTTP statuses according to a link[1] posted above.
[1] https://grepular.com/Abusing_HTTP_Status_Codes_to_Expose_Private_Information https://grepular.com/Abusing_HTTP_Status_Codes_to_Expose_Pri...
- ZoFreX 12y agoWhat legitimate use do those onerror / onload callbacks have... that seems like the kind of thing that should be restricted to same origin!
- TheLoneWolfling 12y agoI've seen it used for fallbacks when loading resources hosted on a CDN.
- f- 12y agoSimilarly to CSP, onload and onerror are not the only ways to pull it off. The effect of successfully or unsuccessfully loading images or scripts can be usually inferred without that; for example, images have dimensions that, even if you take away the ability to read them directly, can be inferred from the changes to the layout of the nearby elements.