Which browsers allow javascript to be the source of image tags?

Question

I heard that some XSS attacks can be done by posting an image on a site with javascript as an src attribute. Are there certain browsers that will protect me from this type of attack?

Answer 1

From http://ha.ckers.org/xss.html :

An XSS image using the JavaScript directive (IE7.0 does not support the JavaScript directive in the context of the image, but this happens in other contexts, but the following are principles that will work in other tags, probably to revise this later):

<IMG SRC="javascript:alert('XSS');">

: [IE7.0 | IE6.0 | NS8.1-IE] [NS8.1-G | FF2.0] [ O9.02 ]

Answer 2

, , :

• GET POST, cookie;
• HTTP Referer;
• crossdomain.xml, Flash.
• cookie
• POST URL, ,
• URL- CSRF; .

: http://en.wikipedia.org/wiki/Cross-site_request_forgery#Prevention

Answer 3

Mozilla Firefox NoScript. javascripts .

Answer 4

, javascript src= . - , , CVE, . : I have tested this against the most recent IE8, chrome and firefox, and they have all patched this issue. , MUCH , ,

<img src=img.jpg onload="alert(/xss/)"/> javascript. , , ​​: src="fake.jpg" onload="alert(/xss/)". htmlspeicalchars($image_location,ENT_QUOTES); htmlspecialchars($image_location). Html Purifier, JavaScript.

XSS, noscript.

XSRF GET. , . , xsrf , . , GET, . - , , img-, .