Skip to content

Category Archives: json

Calling the Array constructor in IE

I had a conversation a while ago on email with Billy Hoffman about how in IE the Array constructor wasn’t called when using [] to create arrays. The question is, was he right? Technically yes but actually no
You see Arrays in JScript are actually objects and not arrays, so trying to overwrite the [...]

Posted 08 January 2009 † Gareth Heyes § Security § javascript ‡ Comments (6)

I know what your friends did last summer

I did report this to Twitter a few weeks ago, but now that Chris Heilmann has let the cat out of the bag I’ll post my repro now. Basically Twitter JSON security is leaking data, the JSON feeds that are publically available shouldn’t be IMO or at least protected using known methods.
So if you [...]

Posted 07 January 2009 † Gareth Heyes § Security § xss ‡ Comments (12)