How is this vulnerability different from the Javascript Redirect vulnerability?
The two vulnerabilities have some similarities. Both involve using redirects to bypass security restrictions, and the effect of both is to allow files on a visiting user’s computer to be read. However, the similarities end there. The underlying problem in the Javascript Redirect vulnerability is a fairly straightforward implementation error, where the underlying problem here is much more complex, and depends on the timing with which various components interact with each other.
