(October 26, 2022, 03:06 PM)cybr3d Wrote: forweb: xss bypass csp, -> create a scripts on github, using https://cdn.jsdelivr.net to ser, -> inject payload xss all param -> done
Wow, this helps a lot, thanks man.
(October 26, 2022, 03:06 PM)cybr3d Wrote: forweb: xss bypass csp, -> create a scripts on github, using https://cdn.jsdelivr.net to ser, -> inject payload xss all param -> done
But how do you know there is csp, sorry for bad at reading sauce :(((