Re: [Full-disclosure] [0 Day] XSS Persistent in Blogspot of Google

[Guifre <guifre.ruiz@xxxxxxxxx>]

Hello,

Agree with Michal. It is very interesting to get to know know new
complex xss vulnerabilities.

IMAHO, the issue here is claiming to have found a vulnerability
without providing a PoC of how to use it to violate a security policy
of the targeted service, probably because there are none, and
therefore it's not a vulnerability but a feature.

Regards,
Guifre.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/