List: websecurity@lists.webappsec.org
From: Frank Heyne
[WEB SECURITY] Is XSS via HTTP_REFERER possible in this case?
Sun, Feb 12, 2012 7:12 AM
Hello,
On a page which is ONLY presented back to the user (lets say search results), a
web application does something stupid like:
There are people who say this would be an XSS vulnerability.
Sure this is not clean code, but I wonder how this could be used for XSS?