Tuesday 8 January 2008

Firefox dialog box authentication spoofing

It looks like it is possible to craft a dialog box with a realm value appearing to be from a "trusted" web site:
http://aviv.raffon.net/2008/01/02/YetAnotherDialogSpoofingFirefoxBasicAuthentication.aspx

No comments: