A Weird CSP Bypass led to $3.5k Bounty
Oct 23, 2024 · 6 min read · Roughly 5 months ago, YShahinzadeh and I found an XSS vulnerability that had a weird CSP bypass leading to Account Takeover and received a $3500 bounty. The journey was quite interesting to me as it involved deep recon, reading many documents of the ...
Llinkssfan commented
Leveraging the SQL Injection to Execute the XSS by Evading CSP
Jul 12, 2022 · 3 min read · Although it sounds silly, I am dumb enough to do this. Introduction to content security policy (CSP) If you are unfamiliar with CSP, you should know more about it before reading further. The security
Join discussion