Re: XSS

We've got an XSS paper that describes a real attack in technical detail. The scenario it uses is a bank login page that uses client-supplied data for a login-failed error message.

http://www.spidynamics.com/mktg/xss

I hope it helps.

Kevin Spett
SPI Labs
http://www.spidynamics.com/

• Original Message ----- From: "John Madden" <chiwawa999@yahoo.com> To: <webappsec@securityfocus.com> Sent: Tuesday, December 10, 2002 9:38 AM Subject: XSS

> Hello all,
Received on Tue Dec 10 10:50:34 2002