Re: [WEB SECURITY] Technical Note by Amit Klein: "XST Strikes Back"

["Amit Klein (AKsecurity)" <aksecurity@xxxxxxxxxx>]

On 25 Jan 2006 at 8:58, Jeremiah Grossman wrote:

> FYI:
> 
> I tested TRACE and TRACK using the following code in Firefox 1.5 and  
> Mozilla 1.7.12. Both browsers deny TRACE and allow TRACK. I also  
> tried several variations to get a TRACE request to send, but no luck.
> 

Yep, I tried TRACE with Firefox > 1.0.6 - no luck. So far...

> My guess is TRACK doesn't matter in this case because proxies  
> probably do not support the request method.
>

My guess as well, which is why I focused on TRACE (only).


---------------------------------------------------------------------
The Web Security Mailing List
http://www.webappsec.org/lists/websecurity/

The Web Security Mailing List Archives
http://www.webappsec.org/lists/websecurity/archive/