Other nomination
CSRF And Ignoring Basic/Digest Auth
CSRF against routers and similar devices protected by Basic or Digest auth normally raises a login popup that warns the victim. Requesting the target URL through a CSS background-image on a DIV suppresses that dialog in Internet Explorer, so a failed GET-based CSRF stays silent. Other browsers were not found to behave this way, and POST-based CSRF is unaffected.
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.