Flickr's API Signature Forgery Vulnerabilityvnhacker.blogspot.com19 points·by thaidn·17 anni fa·3 comments
thaidn·17 anni fa·discussThe final padding is never parsed if we put set them as (part of) the value of an unknown key, i.e., setting a=pi_key....<pading>