An XSS on Facebook via PNGs and Wonky Content Types
Man, I work as a frontend engineer at one of the big tech companies and I understood like 25% of this post.<p>And that's not meant to be a criticism, I'm just reflecting on my total ignorance of most security vulnerabilities. I know about and having implemented <i>some</i> measures against XSS / CSRF, but it's clear there are dozens of attack approaches I'm not even aware of.<p>I feel like I have some homework to do.