Account hijacking using “dirty dancing” in sign-in OAuth-flows

bug bounty Detectify Crowdsource Frans Rosén OAuth postmessage XSS

Popular tags XSS Detectify Crowdsource Frans Rosén bug bounty Detectify