Proving Ground·20 min
Eiji Mori · Norihide Saito
Shows how trusting the HTTP Content-Type from object storage uploads enables XSS and validation bypasses in real products.
webappsecvulnerabilities+2
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 341 talk in the archive.
1–1 of 1 talk
Proving Ground·20 min
Eiji Mori · Norihide Saito
Shows how trusting the HTTP Content-Type from object storage uploads enables XSS and validation bypasses in real products.