Journaling on estrip is free and easy. get started today

Last Visit 2026-09-22 01:17:11 |Start Date 2003-07-07 03:39:31 |Comments 5,619 |Entries 6,444 |Images 14,762 |Sounds 121 |SWF 21 |Videos 322 |Mobl 2,935 |Theme |

Category: html

05/15/15 06:26 - ID#59991

The Ugliest HTML

This vendor is so terrible.

image

Its not just this, its everything.

At one point I found their image loader just let me load any file on their server something like <img src="imageloader.asp?path=c:\inetpub\somefolder\some.jpg" /> which was easily replaced with any file on the server in order to stream it.

When I discussed it with their security team they changed it to something like <img src="imageloader.asp?path=HKJSHD*IY#(#:DJGT..." /> but every image still starts with the same prefix leading me to believe that is the representation of c:\ etc in whatever lame homegrown encryption method they tried to use.

Its scary that they are in the cloud business storing sensitive information.

print addComment

Permalink: The_Ugliest_HTML.html
Words: 124
Last Modified: 05/15/15 06:26


Search

Chatter

New Site Wide Comments

paul said to paul
so cute...

paul said to paul
Test comment from paul...

joe said to joe
I am so happy it's opening again..Downtown needs something attracting people the whole week
....

ExBuffalonian said to joe
We’re a few months into the “new” year already, and I was thinking it has been a little better than ...