In the face of Cross-Site CSS attacks, IE is totally different from FireFox.

 

A few days ago, some hackers on the Internet exposed the use of new CSS methods to attack eBay websites, which caused many people to worry about the security of eBay auction.

It is said that hackers use the principle of cross-site scripting and XBL language to allow eBay websites to contain specified scripts,

CSS style sheets and fake product information. Clicking these product information will directly link to the swindlers website.

 

At the same time, this attack also allows hackers to change the Item number of the eBay website and the seller's email information. It is said that many websites on the Internet can exploit this vulnerability to launch attacks. If users use IE or FireFox browsers, they are more likely to be attacked.

A few days ago, eBay has issued a statement saying this problem has been fixed. However, IE said that this situation is not a vulnerability in the IE browser, but that hackers bypass security protection through a specific function of the website. In fact, this problem should be solved by the website administrator.

FireFox has a different attitude. Although Microsoft's opinion is also the default, Mozilla has developed a new patch to prevent such attacks as much as possible.