actionpack/test/controller/render_json_test.rb · v4.2.7.rc1 · Rails relative code / rails-deleted-2

Jul 09, 2014

Address CVE-2014-4671 (JSONP Flash exploit) · 4003a5bd

Greg Campbell authored Jul 09, 2014

Adds a comment before JSONP callbacks. See
http://miki.it/blog/2014/7/8/abusing-jsonp-with-rosetta-flash/ for more
details on the exploit in question.

4003a5bd

Address CVE-2014-4671 (JSONP Flash exploit)

Greg Campbell authored Jul 09, 2014

Adds a comment before JSONP callbacks. See
http://miki.it/blog/2014/7/8/abusing-jsonp-with-rosetta-flash/ for more
details on the exploit in question.