Hello,

I have and xss like this:

POST /...
Host: server
...

par=<XSS>


HTTP/1.1 200 OK
...
Content-Type: text/plain; charset=UTF-8
...

{"par":"<XSS>"}


client-side code execution can be obtained with IE, but I need a working vector for FF or Chrome. Any suggestions?

Thanks,
c.

iirc this kind of thing is not exploitable in firefox&chrome (and even the latest IE), since they respect the Content-Type header.

-------------------------------------------------------
Research blog