corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0d036-69ae-739f-aee2-0fce16c73cd0

JSON, JavaScript, and CSRF security holes

fleegix.org · published 11 February 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at fleegix.org Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
8
Words captured
486

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
http://www.fortifysoftware.com/servlet/downloads/public/JavaScript_Hijacking.pdf?ref=fleegix.org
fortifysoftware.com
http://jeremiahgrossman.blogspot.com/2007/01/gmail-xsrf-json-call-back-hackery.html?ref=fleegix.org
jeremiahgrossman.blogspot.com
http://events.ccc.de/congress/2006/Fahrplan/attachments/1158-Subverting_Ajax.pdf?ref=fleegix.org
events.ccc.de
http://jeremiahgrossman.blogspot.com/2007/01/review-of-subverting-ajax-white-paper.html?ref=fleegix.org
jeremiahgrossman.blogspot.com
http://getahead.org/dwr?ref=fleegix.org
getahead.org
http://getahead.org/blog/joe/2007/04/04/how_to_protect_a_json_or_javascript_service.html?ref=fleegix.org
getahead.org
http://www.whitehatsec.com/home/resources/articles/files/myth_busting_ajax_insecurity.html?ref=fleegix.org
whitehatsec.com
http://developer.mozilla.org/en/docs/index.php?title=Core_JavaScript_1.5_Guide%3ACreating_New_Objects%3ADefining_Getters_and_Setters&printable=yes&ref=fleegix.org
developer.mozilla.org