Collected research

Melting Pot of Origins: Compromising the Intermediary Web Services that Rehost Websites

Takuya Watanabe, Eitaro Shioji, Mitsuaki Akiyama and Tatsuya Mori · NDSS Symposium

Web proxies, translators and archives rehost many different sites under one domain name, collapsing them into a single origin. Across 21 such services the authors show persistent man-in-the-middle, cross-site access to stored resources and permissions, credential and browsing-history theft, and session hijacking or injection between rehosted sites.

Record

Researcher

Takuya Watanabe, Eitaro Shioji, Mitsuaki Akiyama and Tatsuya Mori

Published by

NDSS Symposium

Topic

Other

In the archive

• Collected in the 2020 research round

Related sources

• NDSS 2020 Melting Pot of Origins: Compromising the Intermediary Web Services that Rehost Websites
• NDSS 2020 Melting Pot of Origins: Compromising the Intermediary Web Services that Rehost Websites

Tags

• same-origin-policy
• sop-bypass
• session-fixation
• info-leak
• proxy
• cookie
• measurement-study
• large-scale-scan
• owasp-a01-2021
• owasp-a07-2021

This page is the archive's own catalogue record. The research is the work of Takuya Watanabe, Eitaro Shioji, Mitsuaki Akiyama and Tatsuya Mori, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 19 August 2026.