With new features come new risks, and HTML5 is no exception: Its WebSocket feature opens the door for a wide range of abuses by attackers, researchers will demonstrate next week at Black Hat USA.
The discovery, which affects services running as localhost that aren’t exposed to any network or the internet, vastly widens the scope of attack possibilities. Defenders will once again be busy ...