Web Hack List

Other nomination

IE8 Link Spoofing - Broken Status Bar Integrity

Internet Explorer 7 and 8's status address bar can be made to show a different destination from the one a link actually opens. Scripted handlers rewrite the target after the browser has painted the status text, so the anti-spoofing behaviour IE8 introduced does not hold, and the post walks a sequence of Target Check and Inference pairs showing the displayed host against the host reached.

Record

Researcher
Aditya K Sood

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of Aditya K Sood, first published at the original source. Preserved copies are kept so the citation survives its host.