PT-2017-16282

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 57.0.2987.98 Google Chrome for Android version 57.0.2987.108 and earlier Description The issue allows a remote attacker to brute force JavaScript variables via a crafted HTML page, exploiting a flaw in the XSS...

Cross-domain JSON resources may be exposed as JavaScript variable data – Opera Security Advisories

JSON strings are sometimes exported by sites as a resource that cannot be read cross-domain, and may contain confidential data. The format of a JSON string ensures that it cannot be read as the contents of a variable, if it is included as a normal script. In some cases, Opera does not correctly...