Re: CSRF attack not possible in I.E. 6.01 SP1?
| From: | Chris Shiflett | Date: | Mon, 16 Aug 2004 18:24:15 +0000 |
| Subject: | Re: CSRF attack not possible in I.E. 6.01 SP1? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-193983@lists.php.net to get a copy of this message | ||
--- Saqib.N.Ali@seagate.com wrote:
> My question: Is I.E. 6.01 SP1 doing something to foil the CSRF
> attack, i.e. only allow image extensions .gif .png .jpeg?????
This seems highly unlikely. Can you show us the code you're using to test?
Chris
=====
Chris Shiflett - http://shiflett.org/
PHP Security - O'Reilly
Coming Fall 2004
HTTP Developer's Handbook - Sams
http://httphandbook.org/
PHP Community Site
http://phpcommunity.org/