writeups.xyz / Bypassing CSP with dangling iframes

Submitter : c2a

Date: 14 June 2022

Bounty : undisclosed

Vulnerabilities :

• CSP Bypass

Programs :

• Google
• Mozilla

Authors :

• Gareth Heyes (@Garethheyes)

Link :
https://portswigger.net/research/bypassing-csp-with-dangling-iframes