|
Cross Site Scripting Vulnerability in Google |
|
|
Google is vulnerable to cross site scripting. While surfing around the personalization section of Google I ran accross the RSS feed addition tool which is vulnerable to XSS. The employees at Google were aware of XSS as they protected against it as an error condition, however if you input a valid URL (like my RSS feed) it will return with a JavaScript function containing the URL.
Read this full article at ha.ckers.org
Only registered users can write comments.
Please login or register. Powered by AkoComment! |
