writeups.xyz / Playing With iframes: Bypassing Content-Security-Policy

Submitter : c2a

Date: 20 April 2021

Bounty : undisclosed

Vulnerabilities :

• CSP Bypass
• Open Redirect
• HTML Injection

Programs :

• Undisclosed

Authors :

• JM Sanchez / 0xEchidonut (@Jmrcsnchz)

Link :
https://jmrcsnchz.medium.com/playing-with-iframes-bypassing-content-security-policy-987c2f0b8e8a