writeups.xyz / Exfiltrating Data from Sandboxed Documents

Submitter : c2a

Date: 14 June 2024

Bounty : undisclosed

Vulnerabilities :

• PostMessage
• DOM XSS
• CSP Bypass

Programs :

• Undisclosed

Authors :

• Monke (@Pmofcats)

Link :
https://www.monke.ie/p/exfiltrating-data-from-sandboxed-documents