writeups.xyz / Bypassing CSP via URL Parser Confusions : XSS on Netlify’s Image CDN

Submitter : c2a

Date: 1 September 2024

Bounty : undisclosed

Vulnerabilities :

• XSS
• CSP Bypass

Programs :

• Netlify

Authors :

• Sudhanshu Rajbhar (@Sudhanshur705)

Link :
https://sudhanshur705.medium.com/bypassing-csp-via-url-parser-confusions-xss-on-netlifys-image-cdn-755a27065fd9