Scoperta una vulnerabilità in Steam, evitate di aprire i profili di altri utenti
“So you can do Cross-site scripting (XSS) on Steam right now. DO NOT load anyones profile. @mikko meta http-equiv=”refresh” works this is bad”
allarme rientrato nel frattempo, hanno patchato il bug: http://kotaku.com/users-say-the-latest-steam-scam-is-profiles-with-malici-1792088640
Users Say The Latest Steam Scam Is Profiles With ‘Malicious Code’ [UPDATE]
kotaku.com
Steam users say that some profile pages are attempting to phish other people through malicious code.
