Skip to content

Prevent Redirector Abuse - Reverse Tabnabbing#1

Open
mavaras wants to merge 1 commit intosyrex88:masterfrom
mavaras:master
Open

Prevent Redirector Abuse - Reverse Tabnabbing#1
mavaras wants to merge 1 commit intosyrex88:masterfrom
mavaras:master

Conversation

@mavaras
Copy link
Copy Markdown

@mavaras mavaras commented Jul 8, 2020

  • This library is vulnerable to this kind of attack. I presume every user of jquery-comments is exposed to this attack.
  • An external malicious user can redirect to it's own malicious link.
  • According to https://cwe.mitre.org/data/definitions/1022.html we can avoid this by simply adding a rel parameter to our links.
  • js/jquery-comments.js a tags modified including rel parameter

- This library is vulnerable to this kind of attack. I presume every user of jquery-comments is exposed to this attack
- According to https://cwe.mitre.org/data/definitions/1022.html we can avoid this by simply adding a rel parameter to our links
- js/jquery-comments.js a tags modified including rel parameter
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant