"One bug to rule them all" I know your get your jollies off finding AV bypasses which is great and all, but I doubt many people call crashing a browser "ruling them all". Maybe re-release with "slightly inconveniencing them all".
2009/7/22 Thierry Zoller <[email protected]>: > Hi Michal, > > MZ> which does not seem to be that far > MZ> from creating an overly nested DOM tree, or drawing an oversized > > Interesting tidbit: > The W3C DOM specifies the select.length attribute to be *read only*. > Yet (all) browsers have implemented it allowing to write to it. I > am not sure what use that has (?) but one thing is sure, they failed > to add a limit, the W3C didn't, but that's because it was never meant > to be written to in the first place. > > > -- > http://blog.zoller.lu > Thierry Zoller > > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ > _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
