Record · corpus.blog/posts/01a0be12-7449-7092-afb1-e12ce31f138a

APPSEC – AWS Amplify+React XSS attacks against AWS localStorage vulnerabilities

securitysandman.com · published 12 April 2021

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at securitysandman.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 23
Words captured: 2,621

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://docs.amplify.aws/

docs.amplify.aws

https://reactjs.org/tutorial/tutorial.html

reactjs.org

https://www.serverless.com/framework/docs/providers/aws/guide/quick-start/

serverless.com

https://docs.aws.amazon.com/cognito/latest/developerguide/what-is-amazon-cognito.html

docs.aws.amazon.com

https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/11-Client_Side_Testing/12-Testing_Browser_Storage

owasp.org

https://owasp-aasvs.readthedocs.io/en/latest/requirement-9.9.html

owasp-aasvs.readthedocs.io

https://www.w3schools.com/bootstrap/bootstrap_get_started.asp

w3schools.com

https://stackoverflow.com/questions/476276/using-javascript-in-css

stackoverflow.com

https://code.google.com/archive/p/browsersec/wikis/Part2.wiki

code.google.com

https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy

developer.mozilla.org

https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest

developer.mozilla.org

https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS

developer.mozilla.org

https://www.w3.org/wiki/CORS

w3.org

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers

developer.mozilla.org

https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies

developer.mozilla.org

https://developer.mozilla.org/en-US/docs/Web/HTTP/Authentication

developer.mozilla.org

https://aws-amplify.github.io/docs/js/authentication

aws-amplify.github.io

https://reactnative.dev/docs/asyncstorage.html

reactnative.dev

https://reactnative.dev/docs/getting-started

reactnative.dev

https://owasp.org/www-community/HttpOnly

owasp.org

https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-using-tokens-with-identity-providers.html

docs.aws.amazon.com

https://github.com/aws-amplify/amplify-js/issues/3436

github.com

https://github.com/aws-amplify/amplify-js/issues/2213

github.com