28 karma · joined February 24, 2008
technoguyrob @ [letter before h]mail (math\.uic\.edu)\/~(robertk) -> $2 @ $1
It's not wrong either for the rest of us to be curious.
........................
I thought David was kidding. Jesus.
EDIT: To answer your question of "are they doing some kind of lookup for each AJAX request?" Well of course, since they already have to look up a user's ID, account information, etc. based on the cookie they send.
EDIT: Or how about just adding an in-line Javascript variable? Say, on all Gmail pages, you could embed this in the page:
<script>var SECURITY_KEY = "918028cd79a5ba47e83e6ba68d036ca3";</script>
And then when sending AJAX or form requests in the background, make sure to include that as a request parameter. That way, even if the user has the right authentication cookies, external websites won't be able to fool Gmail into thinking they are Gmail.Really, this doesn't seem like a very hard problem to solve...couple lines of code...
This only goes to show that eventually, all fields of knowledge will be nothing except mathematics!
http://www.reddit.com/r/programming/comments/7eoth/sounds_li...
<table style="background-image:url(javascript:alert(1))"><tr><td>Hi</td></tr></table>
However, read debt's comment below. XSS is irrelevant here since "XSS" means cross-site scripting, i.e., ,managing to embed Javascript into pages someone ELSE sees. Only the client sees this, it doesn't get reproduced for anyone else.Maybe someone should write a "How People Really Use Slideshare" post...
It would be really freaking cool if Google (Scholar?) could scan these articles into PDFs, then attempt to OCR the references and see if Google has indexed those, then embed hyperlinks to the references. This is technically feasible, and I imagine it would really make a lot of researchers very happy.
But it's the 30th today....
http://llanfairpwllgwyngyllgogerychwyrndrobwyll-llantysiliog...
Has anyone ever heard of this or have enough technical background to expound? I am really curious.
Either way, I suppose it is far off, certainly not any time soon.
Someone please comfort me.