Re: CSRF attack not possible in I.E. 6.01 SP1?
| From: | Chris Shiflett | Date: | Mon, 16 Aug 2004 20:44:05 +0000 |
| Subject: | Re: CSRF attack not possible in I.E. 6.01 SP1? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-194005@lists.php.net to get a copy of this message | ||
--- Saqib.N.Ali@seagate.com wrote:
> Upon your suggestion, I used a sniffer to sniff traffic for
> the web app that I am working on.
>
> To my surprise, the data captured during the sniff for both
> browsers was exactly the same.
Can you elaborate or post the exact requests sent from each browser? I'm
assuming the User-Agent header was different, at the very least, so I
question what "exactly" means in this case. :-)
Chris
=====
Chris Shiflett - http://shiflett.org/
PHP Security - O'Reilly
Coming Fall 2004
HTTP Developer's Handbook - Sams
http://httphandbook.org/
PHP Community Site
http://phpcommunity.org/