Random Security Things I Learn in the IT5331 Class
Well. URI encoding First, URLs can only read ASCII characters - so special characters like ’ ’ (space), ‘<’, or ‘>’ gets encoded using the percent-encoding convention. The javascript function to encode: encodeURIComponent() -> encodeURIComponent('<') // %3C The javascript function to decode: decodeURI() Accessing cookies via DOM document.cookie -> this will return you the entire string of cookies, delimited by ;. e.g. name=123; SID=455 IMG src is actually creating a get request One way of making a request to a server is to just do img src. The following script will make a get request to a server URL and send the cookies! ...