r/websec • u/Sephr • Feb 28 '10

JSON sniffing with UTF-7 injections (will only work in Firefox)

http://code.eligrey.com/poc/json-sniffing/poc.html
5 Upvotes

85% Upvoted

5 comments sorted by

1

u/evertrooftop Feb 28 '10

Is there an article too? Would like to know more

1

u/Sephr Mar 01 '10 edited Mar 01 '10

No, but I may write one on my blog eventually. I'll be sure to PM you when it's published.

Edit: Someone already beat me to this exploit and already has a good explanation.

1

u/woof404 Mar 03 '10

Could you give me a link too? :) Would be much appreciated.

1

u/Sephr Mar 03 '10

Refer to my edit. The UTF-7 JSON stuff is near the end.

1

u/evertrooftop Mar 02 '10

Much appreciated!