Other nomination
Exploiting the unexploitable with lesser known browser tricks
Browser quirks that defeat defences assumed sound. X-Frame-Options SAMEORIGIN can be framed through a same-origin intermediate such as Google AMP or a Twitter player card; AppCache fallback plus a cookie bomb persistently hijacks responses on sandboxed domains; browsers merge identical in-flight requests, leaking Referer-protected responses; relative path overwrite turns CSS and script imports into injection.
Record
- Researcher
- filedescriptor
- Published by
- Speaker Deck
- Date
- Format
- Slides
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of filedescriptor, first published at the original source. Preserved copies are kept so the citation survives its host.