41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a087e3-ecb3-70e2-9564-2bd6c7a3c916

Universal Code Execution by Chaining Messages in Browser Extensions

spaceraccoon.dev · published 7 July 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at spaceraccoon.dev Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 9
Words captured: 3,537

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://owasp.org/www-chapter-london/assets/slides/OWASPLondon_PostMessage_Security_in_Chrome_Extensions.pdf

owasp.org

https://developer.chrome.com/docs/extensions/develop/concepts/content-scripts

developer.chrome.com

https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/Content_Security_Policy

developer.mozilla.org

https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/Background_scripts

developer.mozilla.org

https://developer.chrome.com/docs/extensions/develop/concepts/messaging

developer.chrome.com

https://github.com/palant/chrome-extension-manifests-dataset

github.com

https://developer.chrome.com/docs/extensions/develop/concepts/match-patterns

developer.chrome.com

Cache Me If You Can: Local Privilege Escalation in Zscaler Client Connector (CVE-2023-41973) Read at the source ↗

spaceraccoon.dev

https://website-a.com

website-a.com