RE: XSS through frames?

[Russ]

I know I can bust out of frames... but is it possible to do XSS attacks like 
that?

> -----Original Message-----
> From: Ian Skinner [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, January 18, 2006 3:48 PM
> To: CF-Talk
> Subject: RE: XSS through frames?
> 
> I was wondering, if it's possible to do XSS attacks through frames?  Say
> can one frame of a page access and modify stuff on the other frame?  Can
> the frameset document?
> 
> 
> 
> Russ
> 
> 
> Ummm, YES!  Do a quick Google for "frame busting" and you should find
> several examples of JavaScript that will force a document to the top
> level, busting it out of any frames.
> 
> 
> --------------
> Ian Skinner
> Web Programmer
> BloodSource
> www.BloodSource.org
> Sacramento, CA
> 
> ┌─┬─┐
> │1│ │
> ├─┼─┤
> │ │ │
> └─┴─┘
> 
> "C code. C code run. Run code run. Please!"
> - Cynthia Dunning
> 
> 
> 
> 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:229923
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54