Https Cookie Hijacking

[Guest]

Hi,

I just stumbled upon this cookie vulnerability and was wondering if it's possible to create a Proxo filter for it?

http://fscked.org/blog/fully-automated-a...-hijacking


PS: It seems that Noscript has introduced some kind of protection against it, but I'm not using Noscript, but I rely on Proxo + Sidkis config set.

[ProxRocks]

not a noscript'er either, but if noscript is a fix, then would not "disable scripts by default" be a fix also?

and what about deleting all cookies when the browser is closed? seems that should do the trick also...

[Siamesecat]

Or, you could allow that site to set only session cookies.