I was wondering, if it's possible to do XSS attacks through frames? Say can one frame of a page access and modify stuff on the other frame? Can the frameset document?
Russ Ummm, YES! Do a quick Google for "frame busting" and you should find several examples of JavaScript that will force a document to the top level, busting it out of any frames. -------------- Ian Skinner Web Programmer BloodSource www.BloodSource.org Sacramento, CA âââ¬ââ â1â â âââ¼â⤠â â â âââ´ââ "C code. C code run. Run code run. Please!" - Cynthia Dunning ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Message: http://www.houseoffusion.com/lists.cfm/link=i:4:229922 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
