Other nomination

ISO-8895-1 Vulnerable in Firefox to Null Injection

RSnake reports that ISO-8859-1 pages, which he had recommended after the UTF-8 and US-ASCII issues, also let null bytes through in Firefox and break naive filters. The vector is touchy about what precedes it. The code was only ever shown in a screenshot, which this capture does not hold.

In the archive

• Nominated for the 2007 Top 10 Web Hacking Techniques

Related sources

• Companion demonstration

Tags

• charset
• encoding
• xss
• filter-bypass
• unicode
• sanitizer-bypass
• owasp-a02-2021
• owasp-a03-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of its author, first published at the original source. Preserved copies are kept so the citation survives its host.