Skip to content

Commit 5f52aa7

Browse files
riccardomerlanoBrascoterjanqrmerlano
authored
External reference to image.complete property (#110)
* CORS error on Origin Reflection misconfiguration #103 * Update _index.md added Basco & rick.titor as contributor * Update content/docs/attacks/cache-probing.md Co-authored-by: terjanq <[email protected]> * Update content/docs/attacks/cache-probing.md Co-authored-by: terjanq <[email protected]> * fix for style * fix unclosed shortcode * added ref for default misconf in flask & Rails * Noticed that the issue in Rack CORS was closed * addedd snippet * merging * Update content/docs/attacks/cache-probing.md Co-authored-by: terjanq <[email protected]> * Update content/docs/attacks/cache-probing.md Co-authored-by: terjanq <[email protected]> * Update content/docs/attacks/cache-probing.md Co-authored-by: terjanq <[email protected]> * Update content/docs/attacks/cache-probing.md Co-authored-by: terjanq <[email protected]> * fix in typo * added reference to exernal article about image.complete property Co-authored-by: Brasco <[email protected]> Co-authored-by: terjanq <[email protected]> Co-authored-by: rmerlano <[email protected]>
1 parent aa3fb0a commit 5f52aa7

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

‎content/docs/attacks/timing-attacks/network-timing.md‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -73,6 +73,9 @@ script.onload = () => {
7373
{{< hint tip >}}
7474
A similar technique can be used for other HTML elements, e.g. `<img>`, `<link>`, or `<iframe>`, which could be used in scenarios where other techniques fail. For example, if [Fetch Metadata]({{< ref "/docs/defenses/opt-in/fetch-metadata.md">}}) blocks loading a resource into a script tag, it may allow loading it into an image tag.
7575
{{< /hint >}}
76+
{{< hint tip >}}
77+
An alternative way could be to use `image.complete` property. More information [here](https://riccardomerlano.github.io/xs-leaks/cache-probing-through-image.complete-property/).
78+
{{< /hint >}}
7679

7780
## Cross-window Timing Attacks
7881

0 commit comments

Comments
 (0)