|
WYCIWYG
What You Cache Is What You Get (WYCIWYG) is a Uniform Resource Identifier#Definition, Uniform Resource Identifier (URI) scheme commonly displayed in the address bar of Gecko (layout engine), Gecko-based Web browsers like Mozilla Firefox as when the Web browser is retrieving Web cache, cached information. WYCIWYG is a play on the related acronym WYSIWYG (What You See Is What You Get). Usage Mozilla Firefox implements a registered, strictly internal URI scheme to sort and later reference locally cached pages that were generated or modified by a script on the client side (a common practice for Web 2.0 sites). Security issues In 2007 Michał Zalewski reported that it was possible to bypass the same-origin checks and read from cached (wyciwyg) documents. It was possible at that time to access documents without proper same domain policy checks. This could have enabled an attacker to steal sensitive data, perform cache poisoning and execute their own code or display own content with ... [...More Info...] [...Related Items...] OR: [Wikipedia] [Google] [Baidu] |
Michał Zalewski
Michał Zalewski (born 19 January 1981), also known by the user name lcamtuf, is a computer security expert and "white hat" hacker from Poland. He is a former Google Inc. employee (until 2018), and currently the VP of Security Engineering at Snap Inc. He has been a prolific vulnerability researcher and a frequent Bugtraq poster since the mid-1990s, and has written a number of programs for Unix-like operating systems. In 2005, Zalewski wrote ''Silence on the Wire: A Field Guide to Passive Reconnaissance and Indirect Attacks'', a computer security book published by No Starch Press and subsequently translated into a number of languages. In 2011, Zalewski wrote ''The Tangled Web: A Guide to Securing Modern Web Applications'', also published by No Starch Press. For his continued research on browser security, he was named one of the 15 most influential people in security and among the 100 most influential people in IT. Zalewski was one of the original creators of Argante, a virtual ... [...More Info...] [...Related Items...] OR: [Wikipedia] [Google] [Baidu] |