JSON sniffing with UTF-7 injections | Hacker News Reader

JSON sniffing with UTF-7 injections

code.eligrey.com

2 pointsSephr2 comments

It will only work in browsers that support UTF-7, which as far as I know is only Firefox. The decoded UTF-7 injected code is as follows:

    "}].sniff=[stealData,{"__IGNORE__":"

It will only work in browsers that support UTF-7, which as far as I know is only Firefox. The decoded UTF-7 injected code is as follows:

    "}].sniff=[stealData,{"__IGNORE__":"

What's the vulnerability? It's not explained.