Other nomination
Report Spam, Get Owned
Gmail's Report Spam button also offers to unsubscribe, and taking that offer makes Google open the message's unsubscribe URL in the user's browser. An attacker can put a CSRF payload in that link, so the very action users are trained to take on suspicious mail fires the request from their session.
Record
- Researcher
- Tim Tomes
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Tim Tomes, first published at the original source. Preserved copies are kept so the citation survives its host.