W3C home > Mailing lists > Public > public-web-security@w3.org > December 2009

Re: call for reviewers: XMLHttpRequest Last Call

From: <sird@rckc.at>
Date: Wed, 9 Dec 2009 18:33:25 +0800
Message-ID: <8ba534860912090233s61e629c4v33815b71111c770d@mail.gmail.com>
To: Anne van Kesteren <annevk@opera.com>, public-webapps@w3.org
Cc: Adam Barth <w3c@adambarth.com>, Thomas Roessler <tlr@w3.org>, public-web-security@w3.org
oops I meant

http://kuza55.blogspot.com/2007/07/exploiting-reflected-xss.html
-- Eduardo
http://www.sirdarckcat.net/

Sent from Hangzhou, 33, China

On Wed, Dec 9, 2009 at 6:31 PM, sird@rckc.at <sird@rckc.at> wrote:

> Documentation:
>
> http://ha.ckers.org/blog/20070712/user-agent-spoofable-using-certain-programming-languages/
>
> Greetings!!
>
> -- Eduardo
> http://www.sirdarckcat.net/
>
> Sent from Hangzhou, 33, China
>
> On Wed, Dec 9, 2009 at 6:29 PM, Anne van Kesteren <annevk@opera.com>wrote:
>
>> On Tue, 08 Dec 2009 11:46:43 +0100, sird@rckc.at <sird@rckc.at> wrote:
>>
>>> @Anne, what about the - alias for _ on Apache on request headers?
>>>
>>
>> It would be good to have some more documentation on that particular issue.
>>
>> (In general I'm planning on addressing XHR feedback after December 15.
>> Also, feedback is ideally mailed towards public-webapps@w3.org. That is
>> the group responsible for the document.)
>>
>>
>>
>> --
>> Anne van Kesteren
>> http://annevankesteren.nl/
>>
>
>
Received on Wednesday, 9 December 2009 10:34:22 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Sunday, 19 December 2010 00:16:01 GMT