September 18 at 12:02 am
- Link
listed in 12/21/05: "Internet Explorer will automatically set UTF-7 encoding if it encounters UTF-7 encoded content in the first 4096 characters of an HTTP response. A example image link encoded with UTF-7 is as follows: +ADw-img src+AD0AIg-javascript:alert('Vulnerable')+ADsAIgA+-" - Peter Renshaw