Tor security advisory: cross-protocol http form attack

http://archives.seul.org/or/announce/Sep-2007/msg00000.html "... a malicious website or Tor exit node can give the Tor user a page that includes a POST element directed to Tor's control port localhost:9051... This particular attack worked because Tor's control protocol gave an error message on...