[LINK] WS-I Basic Security Profile

[Rick Welykochy]

stephen at melbpc.org.au wrote:

> 6.2.1 Exactly One Created per Timestamp: R3203 A TIMESTAMP MUST contain 
> exactly one CREATED. 
> 
> This element is REQUIRED and can only be specified once in a Timestamp 
> element. Within the SOAP processing model, creation is the instant that 
> the Infoset is serialized for transmission. 
> 
> For example,

[SNIP]

That's all nice and lovely for what it is.

What happens when I embed a malicious Active-X control in the HTML?
Or perhaps an XSS or AJAX attack on the next URL you fetch in your
B2B transaction?

cheers
rickw


-- 
_________________________________
Rick Welykochy || Praxis Services

People who enjoy eating sausage and obey the law should not watch either being made.
      -- Otto von Bismarck