Later archive addition
Same Origin Method Execution (SOME)
Same Origin Method Execution abuses callback endpoints such as JSONP handlers and Flash applets, whose callback parameter is echoed into executable script. By opening windows and redirecting their documents, an attacker makes the callback value a DOM path aimed at a victim page and fires arbitrary methods on any page of that domain using only alphanumerics and a dot.
Record
- Researcher
- Ben Hayak
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Ben Hayak, first published at the original source. Preserved copies are kept so the citation survives its host.