security.websecurity (thread)

Re: [WEB SECURITY] Stealing Search Engine Queries with JavaScript, Brian Eaton
Re: Stealing Search Engine Queries with JavaScript, Dave \"No, not that one\" Korn
Re: Self-contained XSS Attacks (the new generation of XSS), Tim
- Re: Self-contained XSS Attacks (the new generation of XSS), Ron Jennings
AttackAPI (0.7), pdp (architect)
Host header cannot be trusted as an anti anti DNS-pinning measure, Amit Klein (AKsecurity)
Reminder: 3rd Annual US OWASP AppSec Conference - Oct 16-18 2006 - Seattle, WA, Dave Wichers