Later archive addition

Melting Pot of Origins: Compromising the Intermediary Web Services that Rehost Websites

Takuya Watanabe, Eitaro Shioji, Mitsuaki Akiyama and Tatsuya Mori · NDSS Symposium

Web proxies, translators and archives rehost many different sites under one domain name, collapsing them into a single origin. Across 21 such services the authors show persistent man-in-the-middle, cross-site access to stored resources and permissions, credential and browsing-history theft, and session hijacking or injection between rehosted sites.

Record

Researcher

Takuya Watanabe, Eitaro Shioji, Mitsuaki Akiyama and Tatsuya Mori

Published by

NDSS Symposium

In the archive

• Added to the 2020 archive after the original list was published

Related sources

• Talk recording
• Talk recording

Tags

• same-origin-policy
• sop-bypass
• session-fixation
• info-leak
• proxy
• cookie
• measurement-study
• large-scale-scan
• owasp-a01-2021
• owasp-a07-2021

This page is the archive's own catalogue record. The research is the work of Takuya Watanabe, Eitaro Shioji, Mitsuaki Akiyama and Tatsuya Mori, first published at the original source. Preserved copies are kept so the citation survives its host.