An XSS on Facebook via PNGs and Wonky Content Types
Man, I work as a frontend engineer at one of the big tech companies and I understood like 25% of this post.And that's not meant to be a criticism, I'm just reflecting on my total ignorance of most security vulnerabilities. I know about and having implemented some measures against XSS / CSRF, but it's clear there are dozens of attack approaches I'm not even aware of.I feel like I have some homework to do.