Re: Reflected File Download in AOL Search Website

Posted by Ricardo Iramar dos Santos on Mar 02

It seems was fixed.

HTTP/1.1 200 OK
Date: Sun, 01 Mar 2015 22:21:31 GMT
Server: Apache-Coyote/1.1
Content-Disposition: attachment; filename=autocomplete.txt
Content-Type: application/x-suggestions+json;charset=UTF-8
Content-Language: en-US
Content-Length: 34
Keep-Alive: timeout=5, max=69
Connection: Keep-Alive

[“iramar%22%7C%7Ccalc%7C%7C”, []]

They inclued the header “Content-Disposition: attachment;…

Leave a Reply