Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
Bug

Submission + - HTML5 storage bug exploitable in Chromium, Safari, Opera, and MSIE. (google.com)

Dystopian Rebel writes: A Stanford U comp-sci student has found a serious bug in Chromium, Safari, Opera, and MSIE. Feross Aboukhadijeh has demonstrated (safe link: http://feross.org/fill-disk/) that these browsers allow unbounded local storage. Aboukhadijeh has logged the bug with Chromium (https://code.google.com/p/chromium/issues/detail?id=178980) and Apple but couldn't do so for MSIE because "the page is broken" (see http://connect.microsoft.com/IE). Oops.

Firefox's implementation of HTML5 local storage is not vulnerable to this exploit.

Slashdot Top Deals

10.0 times 0.1 is hardly ever 1.0.

Working...