WebApp Sec: Re: XSS

[zeno <bugtraq () cgisecurity net>]

> You can do the document.cookie and view your
> cookie, that migth give a hint on the structure but...
> or redirect yourself to another web site :) etc...
>
> I've read the document on XSS by David Endler
> http://www.idefense.com/papers.html but still have
> some questions.
>  


I have written the XSS FAQ which I plan on adding two new things sometime later this week.
It is located at www.cgisecurity.com/articles/xss-faq.shtml. (Check for new additionals
early next week. )

- zeno () cgisecurity com