For example, this is a template file that renders an application/javascript response with all the messages in the user's inbox: $("#messages").html('<%=j render("messages") %>');
Prikaži ovu nit
When auditing Ruby on Rails apps, always search for <name>.js.erb views files. There is a stupid pattern called "Server-generated JavaScript Responses" which is a way to bypass SOP and inject content via JavaScript files (just like JSONP) which leads to XSSI.
-
-
-
Just include that js view on your site and you will get all the user's e-mails: <div id="messages" class="messages"></div><script src="https://victim/messages/inbox?format=js"></script>
Prikaži ovu nit
Kraj razgovora
Novi razgovor -
-
-
Medio dato , vale bro
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.