[WEB SECURITY] Re: [Full-disclosure] [WEB SECURITY] Universal XSS with PDF files: highly dangerous

[M.B.Jr. <marcio.barbado@xxxxxxxxx>]

On 1/3/07, Jim Manico <jim@xxxxxxxxxx> wrote:
> I'm most worried about the CSRF vector.

how come?

this is client-side stuff.

--
Marcio Barbado, Jr.
==============
==============

----------------------------------------------------------------------------
The Web Security Mailing List: 
http://www.webappsec.org/lists/websecurity/

The Web Security Mailing List Archives: 
http://www.webappsec.org/lists/websecurity/archive/
http://www.webappsec.org/rss/websecurity.rss [RSS Feed]