Tag Archives: HTML5

Taking screenshots using XSS and the HTML5 Canvas

Posted on April 16, 2012 by Phil

Using the HTML5 Canvas its possible to use XSS to take screenshots of administration and management interfaces that might not have access to. Blind Stored XSS By injecting script tags containing an external JavaScript resource into arbitrary HTTP input fields you can attempt … Continue reading →

Posted in Exploits, HTML5, JavaScript | Tagged , , | 9 Comments

JavaScript and Daylight Savings for tracking users.

Posted on October 2, 2011 by Phil

Each country has their own timezone – although timezones are not generally unique variations in the offset can enable a website using JavaScript to pinpoint your location and operating system to an alarming degree of accuracy. Most countries time differs … Continue reading →

Posted in JavaScript | Tagged , , | 3 Comments

Clickjacking and Phishing with help from the HTML5 JavaScript Sandbox

Posted on May 1, 2011 by Phil

HTML5 has some nice new features one of which is JavaScript Sandboxing using iframes. Chrome is currently the only browser to support this but you can be sure others will soon follow. The sandbox allows control over what can be … Continue reading →

Posted in HTML5 | Tagged , , , , | 6 Comments