Les développeurs d’applications FaceBook savent que certaines fonctionnalités sont bloquées par facebook pour des raisons évidentes de sécurité.
Avec le nouveau design, l’utilisateur a la possibilité d’ajouter une application (si l’application la prévu) sous un onglet. FaceBook bloque donc les scripts qui permettraient par exemple d’ajouter sous un onglet son blog, un site ou son mySpace.
Et pourtant, il existe une faille dans faceBook qui laisse la possibilité d’insérer sous l’onglet de son profil n’importe quel site.
Il y a déjà quelques semaines, j’ai donné cette information à des blogueurs (spécialistes FB aux US), mais mon annonce n’a pas eu l’air assez intéressante pour être signalé.
Mercredi dernier au FaceBook Developer garage qui a eu lieu au « Le Web », j’aurais aimé en discuter avec des personnes de Facebook, mais la seule personne technique de Facebook s’est éclipsé rapidement.
En sortant de la réunion, j’ai croisé Korben, vêtu d’un magnifique sweat (si tu as les réfs Korben merci de me les envoyer). Nous avons papoté et je lui est indiqué la faille de faceBook. Pour démontrer mes dires, voici un exemple : le site de Korben sous mon onglet faceBook.
Bien sûr il ne s’agit pas d’un collage Photoshop!
avec netvibes, bien sûr il ya un problème de largeur mais on arrive à naviguer …
Failles critiques FaceBook XSS et CSRF
[…] http://www.jordimir.com/2008/12/12/une-faille-dans-facebook/ […]
françoise grave
J’écris quelques courts articles sur mon blog de classe gernez stories , sur les failles facebook. J’évoque dons votre site.
Votre article aussi.Comment dire? c’est un vrai plaisir de mettre à mal la réputation de ce réseau social!
golden goose sneakers
I have to get across my admiration for your kindness for persons that require assistance with your subject. Your very own dedication to passing the message all through had become extremely useful and has always helped guys much like me to realize their ambitions. Your new valuable key points means this much to me and further more to my peers. Thanks a ton; from all of us.
golden goose
I want to get across my affection for your kind-heartedness for men who need help on this important niche. Your very own dedication to getting the solution all over had become remarkably practical and has in every case enabled others like me to reach their desired goals. Your important facts entails this much a person like me and further more to my office colleagues. Thank you; from each one of us.
jordan 6
I intended to post you this very little remark to finally thank you so much the moment again regarding the exceptional pointers you have contributed in this case. This is certainly incredibly generous of people like you to present freely exactly what a lot of people could have supplied as an e book in order to make some profit for themselves, particularly since you could have done it in case you considered necessary. These points in addition worked as a easy way to understand that someone else have a similar zeal just like my very own to learn much more in regard to this condition. I think there are several more fun moments up front for individuals that scan your site.
Roseanna
I didn’t know that.
nike off whtie
I am commenting to make you understand what a brilliant discovery our daughter obtained visiting yuor web blog. She realized too many issues, including how it is like to have a very effective giving character to let many others clearly know precisely chosen extremely tough issues. You truly exceeded visitors’ expectations. Many thanks for offering those good, safe, informative and also fun tips on this topic to Julie.
lebron james shoes
Thank you a lot for giving everyone an extremely remarkable opportunity to check tips from here. It can be very enjoyable and as well , full of a great time for me and my office colleagues to search the blog at a minimum 3 times in a week to find out the fresh secrets you will have. Of course, I am just at all times fulfilled with your impressive creative concepts you give. Selected 2 ideas on this page are certainly the most suitable we’ve had.
supreme clothing
I simply needed to thank you very much yet again. I’m not certain the things that I would’ve gone through without those concepts revealed by you regarding that situation. Entirely was the challenging scenario in my view, nevertheless seeing a professional strategy you solved the issue took me to cry for joy. I’m just happy for the assistance and then pray you find out what a powerful job you happen to be getting into educating the mediocre ones using a blog. I am certain you’ve never encountered all of us.
off white hoodie
I must express my love for your generosity giving support to people that should have help with the field. Your personal dedication to getting the message all over was extraordinarily productive and has continually made workers like me to achieve their objectives. Your personal invaluable guidelines implies this much to me and substantially more to my mates. With thanks; from each one of us.
curry 6 shoes
I must point out my respect for your kindness supporting all those that have the need for help on this particular content. Your real commitment to getting the message up and down came to be astonishingly powerful and have without exception permitted many people just like me to arrive at their aims. Your personal important guideline denotes a lot to me and somewhat more to my mates. Thank you; from everyone of us.
kyrie 5 shoes
I wish to show my respect for your kind-heartedness supporting women who really want guidance on this issue. Your real commitment to passing the solution all around became definitely significant and have truly helped somebody just like me to get to their desired goals. Your amazing interesting guideline means a lot a person like me and further more to my fellow workers. Warm regards; from all of us.
golden goose sneakers
I want to point out my admiration for your kind-heartedness for persons who require help on this particular field. Your special commitment to passing the solution all-around came to be especially productive and has surely allowed many people much like me to reach their ambitions. Your entire invaluable key points implies so much to me and especially to my office workers. Best wishes; from everyone of us.
off white outlet
I simply desired to say thanks again. I’m not certain what I might have handled in the absence of the actual advice documented by you directly on my question. This was a very fearsome dilemma for me personally, however , spending time with a specialized form you handled the issue forced me to leap with happiness. Extremely happier for the work and in addition hope that you find out what a great job you’re doing instructing others using your site. I am certain you’ve never come across all of us.
supreme shirt
My husband and i got quite fulfilled that Emmanuel could deal with his survey through the entire ideas he got from your own web pages. It is now and again perplexing to simply always be releasing helpful tips most people may have been selling. We consider we’ve got you to appreciate for that. These explanations you have made, the easy web site menu, the relationships you will give support to promote – it’s got many wonderful, and it’s assisting our son in addition to our family know that this matter is cool, which is extremely indispensable. Many thanks for everything!
supreme new york
I want to get across my passion for your kindness supporting people that should have assistance with this particular niche. Your very own commitment to getting the message all-around was unbelievably advantageous and has continuously made folks just like me to arrive at their ambitions. This interesting tips and hints denotes a lot a person like me and substantially more to my fellow workers. Thank you; from everyone of us.
westbrook shoes
I precisely had to say thanks all over again. I do not know the things I would have sorted out in the absence of these ideas documented by you regarding my problem. It absolutely was a real frightful matter in my position, nevertheless witnessing a new specialised mode you handled that forced me to cry over gladness. Now i’m happy for the information and believe you find out what a great job your are doing training most people using your blog. Most probably you have never got to know all of us.
a bathing ape
I precisely desired to appreciate you once more. I do not know the things that I would have tried in the absence of those techniques discussed by you over such a area of interest. It has been the difficult setting in my circumstances, but understanding this skilled technique you dealt with it made me to cry over fulfillment. I’m grateful for your work as well as sincerely hope you recognize what an amazing job your are providing instructing many others via a web site. Probably you haven’t met all of us.
cheap kyrie 7
I am only writing to let you understand of the fine encounter my wife’s princess obtained checking yuor web blog. She came to understand plenty of details, most notably how it is like to have a marvelous teaching nature to make a number of people without problems fully grasp specific multifaceted matters. You really surpassed our desires. Thank you for distributing these valuable, safe, informative and also fun tips on the topic to Evelyn.
off white nike
I wish to get across my admiration for your generosity giving support to individuals that really want help with this concept. Your real dedication to passing the solution all over appeared to be amazingly insightful and has in every case made some individuals just like me to attain their pursuits. Your entire warm and friendly suggestions signifies a lot to me and even more to my fellow workers. Regards; from everyone of us.