MemeStreams | MemeStreams Discussion

Create an Account

This page contains all of the posts and discussion on MemeStreams referencing the following web page: Breaking the IE8 XSS Filter. You can find discussions on MemeStreams as you surf the web, even if you aren't a MemeStreams member, using the Threads Bookmarklet.

Breaking the IE8 XSS Filter
by Worthersee at 2:35 pm EST, Nov 25, 2008

In short

Stored (persistent) XSS: Filtered
Reflected (non-persistent) XSS
DOM-Based: Partial
In tag: No
In Javascript: No
In [tag] parameter: Filtered
In HTML: Filtered
HTTP Response Splitting: No*

* HTTP Response Splitting can used to switch XSS filter of via X-XSS-Protection header.