visits one page that either is on site X or appears to be on site X when in fact a request
on that page is being requested against site Y.
To understand this attack, it helps to
know how HTTP works and how websites work.
In order to understand this, let’s
take a look at some simple HTML source in
Example 8-3
.
Example 8-3. Sample HTML source code
</b>
<br />This is a title
<br /><b>
rel=
"stylesheet"
type=
"text/css"
href=
"pagestyle.css"
>
This is a header
Bacon ipsum dolor amet burgdoggen shankle ground round meatball bresaola
pork loin. Brisket swine meatloaf picanha cow. Picanha fatback ham pastrami,
pig tongue sausage spare ribs ham hock turkey capicola frankfurter kevin
doner ribeye. Alcatra chuck short ribs frankfurter pork chop chicken cow
filet mignon kielbasa. Beef ribs picanha bacon capicola bresaola buffalo
cupim boudin. Short loin hamburger t-bone fatback porchetta, flank
picanha burgdoggen.
src=
"
/
anotherpage
.
html
"
>
This is a link
src=
"/images/picture.png"
>
