Collected research
IE8 Link Spoofing - Broken Status Bar Integrity
Internet Explorer 8 : Anti Spoofing is a Myth
Internet Explorer 7 and 8's status address bar can be made to show a different destination from the one a link actually opens. Scripted handlers rewrite the target after the browser has painted the status text, so the anti-spoofing behaviour IE8 introduced does not hold, and the post walks a sequence of Target Check and Inference pairs showing the displayed host against the host reached.
Record
- Document
- Internet Explorer 8 : Anti Spoofing is a Myth
- Researcher
- Aditya K Sood
- Published by
- secniche.org
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Aditya K Sood, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .