Collected research
Exploiting Number Parsers in JavaScript
parseInt and parseFloat return the first element when handed an array, so a range validator comparing an array against a number fails open and the unchecked first element still reaches the database query. Combined with query-string parameter pollution that turns a repeated parameter into an array, this defeats pagination validation and causes denial of service.
Record
- Researcher
- bn-modir
- Published by
- Borna Nematzadeh
- Date
- Topic
- Server
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of bn-modir, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .