Apple today released Security Update 2007-006, addressing security holes in its WebCore and WebKit technologies which directly affect Web browsing under Mac OS X. The security update fixes an HTTP injection issue that exists in XMLHttpRequest when serializing headers into an HTTP request. By enticing a user to visit a maliciously crafted Web page,