Content-type sniffing leads to stored XSS in CMS Airship on Internet Explorer
该报告还没有中文解读。
原文摘录
摘自原文（3206 字符中的一小部分）
Description Internet Explorer has the nasty habit to perform Content-Type sniffing on delivered resources if the content-type is not known to it. Since the software isn't instructing Internet Explorer to disable content-type sniffing this leads to a stored XSS.
原文中的代码
From 42bc1760453fbfed004072929d99d9c397ab3f77 Mon Sep 17 00:00:00 2001 From: Lukas Reschke <[email protected]> Date: Thu, 14 Jul 2016 00:57:26 +0200 Subject: [PATCH] Prevent Mime Sniffing in Internet Explorer --- src/Cabin/Hull/Landing/PublicFiles.php | 3 +++ 1 file changed, 3 insertions(+) …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Paragon Initiative Enterprises 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @lukasreschke · 版权归作者与 Paragon Initiative Enterprises 所有