---
id: 2316
title: "Browser bugs vs. attacks on same origin policy"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/browser-bugs-vs-attacks-on-same-origin-policy"
published_at: "2007-08-15T06:06:00Z"
tags: ["browser-security", "web-security", "xss", "research", "portswigger", "same-origin-policy", "dns-rebinding", "json-hijacking"]
phying_url: "https://phying.com/item/2316"
lang: en
---

# Browser bugs vs. attacks on same origin policy

## Summary

Dafydd Stuttard weighs browser 0days against same-origin-policy attacks: app defenses can't survive a compromised browser, but SOP bypasses still matter as web security is a weakest-link problem.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2007-08-15T06:06:00Z
- **Original:** https://portswigger.net/blog/browser-bugs-vs-attacks-on-same-origin-policy
- **Phying News:** https://phying.com/item/2316