writeups.xyz / Stealing passwords from McDonald's users

Submitter : c2a

Date: 9 January 2017

Bounty : undisclosed

Vulnerabilities :

• Reflected XSS
• AngularJS Sandbox Bypass

Programs :

• McDonalds

Authors :

• Tijme Gommers (@Tijme)

Link :
https://tij.me/blog/stealing-passwords-from-mcdonalds-users/