Cure53 comments

Results 46 comments of


                                            Cure53

Need to block external calls, e.g. all HTTP requests

We do in fact have a project that once attempted to catch them all, here it is: https://github.com/cure53/HTTPLeaks However, this does not automatically cover new ways of leaking HTTP requests,...

Need to block external calls, e.g. all HTTP requests

I think this should be quite close to what you need, correct? It's a (naive and very bad) implementation of a toggle for fetching content or not using CSP. I...

Need to block external calls, e.g. all HTTP requests

> Leaves the case where I need only a part of the page to be sanitized Would that no be doable using the `IN_PLACE` config or by working with nodes...

Need to block external calls, e.g. all HTTP requests

Closing this for now, as there no action planned.

Example

Heya, I just randomly picked some example files and tested them. They work for me. Can you be more precise please and deliver more info than "dunnot work!"? I would...

What are the current ways that javascript execution is possible with jQuery

I think, the $.ajax/$.get/$.post API is worth mentioning here.

What are the current ways that javascript execution is possible with jQuery

Soooo, do what now? :)

Is there a way to test the exploit without popping up an alert?

Not sure if I understand the question 100% right. What exactly do you mean?

Is there a way to test the exploit without popping up an alert?

Yep, exactly. You want it the other way round, correct?

Is there a way to test the exploit without popping up an alert?

So, what is needed from our side?