Abusing The HTML5 Data-URI
[Update: Some of these examples were mitigated in Chrome 38 and 39] After seeing in the previous post how Data-URIs can be used as a mechanism to easily carry malicious code, I’ll elaborate more about the issues it presents. Some of it merely exists from the way Data-URIs are »