from Hacker News

Weaponized Google OAuth Triggers Malicious WebSocket

by s-mon on 6/10/25, 8:07 PM with 1 comments

  • by unknownhad on 6/10/25, 9:16 PM

    This looks interesting, This trick is good for hiding the bad code and to bypass the CSP.