postmessage

Hacking Slack using postMessage and WebSocket-reconnect to steal your precious token

Frans Rosén postmessage Slack

Popular tags XSS Frans Rosén Mathias Karlsson bug bounty Chrome

AddThis Mathias Karlsson postmessage

postMessage XSS on a million sites

December 15, 2016

Mathias Karlsson postmessage

The pitfalls of postMessage

December 8, 2016