SQL Injection vs. XSS vs. CSRF: 1 Million Users in 20 Hours and a £400,000 Fine

SQL Injection vs. XSS vs. CSRF: 1 Million Users in 20 Hours and a £400,000 Fine On October 4, 2005, a MySpace user posted a profile containing a few lines of JavaScript that slipped past the site's fi