Flickr's API Signature Forgery Vulnerabilityvnhacker.blogspot.com19 points·by thaidn·vor 17 Jahren·3 comments
thaidn·vor 17 Jahren·discussThe final padding is never parsed if we put set them as (part of) the value of an unknown key, i.e., setting a=pi_key....<pading>