Eradicating image authentication injection from the entire internet

Published

2017-05-10 00:00

Collected

2026-08-18 01:13

---
id: 6582
title: "Eradicating image authentication injection from the entire internet"
source_domain: samcurry.net
source_url: "https://samcurry.net/eradicating-image-authentication-injection-from-the-entire-internet"
published_at: "2017-05-10T00:00:00Z"
tags: ["bug-bounty", "rce", "browser-security", "web-security", "disclosure", "safari", "credential-prompt", "security-news", "samcurry-net"]
phying_url: "https://phying.com/item/6582"
lang: en
---

# Eradicating image authentication injection from the entire internet

## Summary

Eradicating image authentication injection: subresources answering HTTP 401 could trigger browser credential prompts; persistent reports got Safari and others to fix it, retiring a bug class.

## Intelligence Metadata

- **Sources:** samcurry.net
- **Published:** 2017-05-10T00:00:00Z
- **Original:** https://samcurry.net/eradicating-image-authentication-injection-from-the-entire-internet
- **Phying News:** https://phying.com/item/6582