14.07.2013 Views

Basic web security model - Stanford Crypto Group

Basic web security model - Stanford Crypto Group

Basic web security model - Stanford Crypto Group

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Sending a Cross-Domain POST<br />

<br />

<br />

<br />

document.forms[0].submit()<br />

submit<br />

post<br />

Hidden iframe can do this in background<br />

⇒ user visits a malicious page, browser submits<br />

form on behalf of user<br />

⇒ e.g. page re-programs user’s home router (XSRF)<br />

Can’t send to some restricted ports, like 25 (SMTP)

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!