Understanding the Greasemonkey Vulnerability
Simon Willison,
Jul 21, 2005
If you haven't heard, Greasmonkey - a Firefox extension that allows you to write DHTML scripts that apply on remote pages - was discovered to have a major vulnerability. Never exploited (it was discivewred by Greasmonkey developers themselves) it is nonetheless serious enough to require that all Greasemonkey users update immediately. This article explains the vulnerability - and gives you an idea just how complex client-side scripting can be.
Today: 6 Total: 98 [Direct link] [Share]
