An alleged SSL/TLS protocol vulnerability

Posted Sep 26, 2011 22:40 UTC (Mon) by bjartur (guest, #67801)
In reply to: An alleged SSL/TLS protocol vulnerability by tialaramex
Parent article: An alleged SSL/TLS protocol vulnerability

Thing is, XSS practically taints *the whole page*. You can't trust any of it. God forbid you from running code from it sans review.