My attempts to reproduce it (I have quite a lot of code that returns JSON arrays) on the smattering of browsers I had handy resulted in no apparent vulnerabilities.
On Tuesday, February 17, 2015 at 10:30:20 AM UTC+10:30, Tom Christie wrote: > > I haven't dug out sources on this, but I think that vulnerability had been > dealt with a long time ago, and isn't an issue on browsers with any real > market share today. > > Would need to double check though - don't remember where I came across it > previously. -- You received this message because you are subscribed to the Google Groups "Django developers (Contributions to Django itself)" group. To unsubscribe from this group and stop receiving emails from it, send an email to django-developers+unsubscr...@googlegroups.com. To post to this group, send email to django-developers@googlegroups.com. Visit this group at http://groups.google.com/group/django-developers. To view this discussion on the web visit https://groups.google.com/d/msgid/django-developers/df61d6a0-48d7-49fc-bb94-227e73e83c48%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
