XSS - alive, dead or just nedobit?

Dec 8, 2010

What is XSS think many people know, but who do not know here well written. Briefly describe the same - a seo a mean xss hole on the site, which allows you to get from this site Freestuff lords.

Special significance and I would not betrayed, especially after the theme "Uraaa! to finally put an XSS filters "on the SE forum. But after the topic Maula, I again became interested in the matter. Found progonschika, made the order, the result did not wait, TCI apnulsya from 10 to 750 on the same site, and the second from 10 to 1300.

What is the problem, why XSS is still alive and not under the filter? - Actually it under the filter, but the filter only applies to a reference weight of such links. If earlier so you could pick up some good midrange queries, now you do not. But TCI transferred fine.

Why did not impose a filter Yandex transfer of particles with such links? - Make a filter to him were not working, but if he does it, it means that you have a reason, and most likely financial.

A little thought, he came to this conclusion - links from the sites moved by XSS on the basis of new entrants are actively bought up at the same Sape, and for such references are paying good money (still, TCI under 1000, and 2-3 OL, too, is not difficult to do) but here the effect of such a link - 0. Accordingly, the budget optimizer grow and progress is in place - the customer goes to the directives.

Well, then, the expression "Pal's theme" to XSS are no longer applicable, although the SE all mention of it is still punishing. Let's see how much more live issue, too popular it becomes.

0 comments: