All Questions
3 questions
3votes
1answer
1kviews
Any vulnerabilities from shorting browser's XML parser?
I have found a way of forcing a site to return content-type XML to the user's browser even though the content is HTML. The browser then interprets this site as XML and throws an error since the HTML ...
- 105
2votes
2answers
570views
Can a static (HTML only) site be vulnerable to XXE?
First of all sorry if I am asking a trivial question. As far as I know, XML is used for representing document structures. Can entirely static sites accepting no user inputs at all be vulnerable to ...
1vote
1answer
2kviews
How to prevent XSS when transferring web page content within XML
I have an ASP.NET web application which uses HTTPS and XML based request-response. It seems a user's session cookie can be retrieved via XSS, if the request/response is intercepted and malicious ...
- 137
