Q and A on cross site request forgeries and breaking into sessions. It's one of the attacks that XSS enables and the attack of the future. For Session, fixations, hijacking, lockout, replay, session riding etc....
<!-- via LINK tag -->
<link rel="fontdef" src="http://what.ever.you.want">
<!-- or via STYLE tag -->
<style type="text/css">
@font-face { font-family:Chianti XBd BT;
src:url(http://what.ever.you.want); }
</style>
</head>
<body>
csrf via eot
</body>
</html>
Using this proprietary code to embed fonts for IE you can create a CSRF vector because IE of course has to make a request to the given ressource - interesting should be the fact of filter evasion possible with this snippet. I tried to create an xss with that one but didn't manage it.
Greetings and happy new year,
.mario
Edited 1 time(s). Last edit at 12/25/2006 04:37AM by .mario.
