Document "what to look for" when doing handler vuln research

ouspg / urlhandlers

Discover and Hack URL handlers

MIT License

34 stars 3 forks source link

Open ikisusi opened 8 years ago

ikisusi commented 8 years ago

Crowdsource URL handler research would benefit from some sort of "What to look" for documentation.

ikisusi commented 8 years ago

[ ] Arbitrary html/javascript injection
[ ] Same origin violations
[ ] Resource consumption
[ ] Arbitrary command/code execution
[ ] New opportunities for "pop-up" marketing&spamming to by-pass pop-up protection & adblockers
...