Home page logo

bugtraq logo Bugtraq mailing list archives

Re: Browser bugs hit IE, Firefox today (SANS)
From: 3CO <threecheeseopera () gmail com>
Date: Wed, 12 Jul 2006 15:52:55 -0400

On 7/4/06, Thor Larholm <thor () polypath com> wrote:
However, reading the contentDocument property of the DOM element instead
of the through the frames collection will give you a reference to the
document object inside the thirdparty domain and even allow you to
overwrite native DOM methods without throwing a security exception, such

This code throws an exception in Firefox
"Error: uncaught exception: Permission denied to set property

Just obtaining a reference to the contentDocument works, but any
action on it throws an error.

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]