writeups.xyz / Ambushed by AngularJS: a hidden CSP bypass in Piwik PRO

Submitter : c2a

Date: 28 April 2023

Bounty : undisclosed

Vulnerabilities :

• CSP Bypass

Programs :

• PortSwigger
• Piwik

Authors :

• Gareth Heyes (@Garethheyes)

Link :
https://portswigger.net/research/ambushed-by-angularjs-a-hidden-csp-bypass-in-piwik-pro