Reflected File Download: A New Web Attack Vector
I think the author is claiming that clicking on https://www.google.com/s;/ChromeSetup.bat;/ChromeSetup.bat?g...
results in a file ChromeSetup.bat being downloaded, but in chrome and firefox the file downloaded is f.txt.Has anyone tried this on other browsers?EDIT:Here is the portion of the paper explaining why this no longer works:"However, a common implementation error could result in Reflected File Download from the worst kind. Content-Disposition headers SHOULD include a "filename" parameter, to avoid having the browser parse the filename from the URL.This is the exact problem that multiple Google APIs suffered from until I reported it to the Google security team, leading to a massive fix in core Google components."