its not a vulnerability.. the exploit was something like <keygen autofocus
onfocus=...
that's only allowing to auto exec js without user interaction... im not
saying it should be deleted.. it was just an example in how html5 is
bringing us new cool vectors.
-- Sent from my cellphone.
On Dec 6, 2009 5:32 PM, "Maciej Stachowiak" <mjs@apple.com> wrote:
On Dec 6, 2009, at 1:22 AM, sird@rckc.at wrote: > hi! > > I understood only
members/invited.expert...
Cn you give me an explanation of the exploit or a link to an explanation?
I'm not familiar with the issue you are referring to.
Regards,
Maciej