"Google has released for free one of its internal tools used for testing the security of Web-based applications.
Ratproxy, released [as beta] under an Apache 2.0 software license, looks for a variety of coding problems in Web applications, such as errors that could allow a cross-site scripting attack or cause caching problems.
....."
pcworld.com/article/147917/goo ...
And Google Online Security Blog's entry:
googleonlinesecurity.blogspot. ...
The tool:
code.google.com/p/ratproxy
|
The documentation is here:
code.google.com/p/ratproxy/wik ...
One of the things it says is:
"Key low-level check groups implemented by ratproxy [include] subtle mistakes such as serving GIF files as image/jpeg"
Yet Philipp found YouTube serving animated GIFs as JPGs here:
blogoscoped.com/archive/2008-0 ...
So maybe YouTube hasn't started using this tool yet. |
