PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Safari is hot-linking images to semi-random websites

portswigger.net | research | #browser-security | #url-parsing | #safari | #ocr | #hot-linking
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Safari's over-enthusiastic OCR parses text inside images into clickable links — the Amazon logo's arrow produced 'Zon.com'; the research probes which URL formats and payloads Safari will accept.
Published
Collected

Related coverage

blog · samcurry.net
Eradicating image authentication injection from the entire internet
Eradicating image authentication injection: subresources answering HTTP 401 could trigger browser credential prompts; persistent reports got Safari and others to fix it, retiring a bug class.
research · portswigger.net
What's in a tag name? JavaScript, apparently
This research provides technical context that security teams can use for monitoring and validation.
research · portswigger.net
CSS:the bomb inside your inbox
PortSwigger breaks webmail CSS sanitizers to cross trust boundaries, exfiltrate tokens, control AI browsers by email and steal passwords, with attacks spanning Yahoo, Fastmail, ProtonMail and Gmail.
research · portswigger.net
Gotta cache 'em all: bending the rules of web cache exploitation
Doyhenard's research exploits URL parser discrepancies and RFC ambiguities between CDNs and origins — delimiters, normalization, static extensions — achieving arbitrary cache poisoning and deception.
research · portswigger.net
Concealing payloads in URL credentials
Payloads concealed in URL credentials stay invisible in Chrome and Firefox address bars, persisting through same-origin navigation; document.URL exposes them, enabling DOM XSS and clobbering.
research · portswigger.net
onwebkitplaybacktargetavailabilitychanged?! New exotic events in the XSS cheat sheet
The XSS cheat sheet adds exotic event vectors: Safari-only onwebkitplaybacktargetavailabilitychanged for audio/video, heavy-interaction onpointercancel and the widely usable autofocus attribute.
Back