[Full-disclosure] Gmail XSS?

[Juha-Matti Laurio]

According to this news it was fixed already:
http://blogs.zdnet.com/Google/?p=434

See a quote of Google Security Team

- Juha-Matti


Denzity <denzity at gmail.com> wrote: 
>
> There's reports of a gmail xss in the wild that will steal someone's contact
> list and email if they website is visited while being logged in to gmail.
> 
> http://cyber-knowledge.net/blog/2007/01/01/gmail-vulnerable-to-contact-list-hijacking/
> 
> I can't find this on Bugtraq or any release. Anyone have any more info or
> a PoC?
>
> Thanks, Denzity.