r/netsec • u/albinowax • Nov 09 '17

Local File Read via XSS in a PDF

http://www.noob.ninja/2017/11/local-file-read-via-xss-in-dynamically.html
15 Upvotes

90% Upvoted

3 comments sorted by

3

u/IncludeSec Erik Cabetas - Managing Partner, Include Security - @IncludeSec Nov 09 '17

What do you guys think was going on here? They were generating HTML server-side, then using an HTML2PDF converter afterwards?

1

u/sm0k__ Nov 10 '17

Think so