41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a08c65-ff07-73db-99f6-53d4b3fb3387

Account Takeover in Canvas Apps served in Comet due to failure in Cross-Window-Message Origin validation

ysamm.com · published 29 January 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at ysamm.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 3
Words captured: 923

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://apps.facebook.com/compat

apps.facebook.com

https://apps.facebook.com/dialog/oauth?app_id=1774400339513387&redirect_uri=https://www.facebook.com/dialog/return/arbiter%23is_canvas%3Dtrue%26origin%3D*&display=async&state=fa6a98360231ec&client_id=1774400339513387&is_comet_compat=true&cquick=jsc_c_1p&cquick_token=AQ4d9gLTLArx2JrntAk&ctarget=https%3A%2F%2Fapps.facebook.com

apps.facebook.com

https://facebook.com/dialog/return/arbiter

facebook.com