CSPT + Open Redirect = Account Takeover?
chaining cspt and open redirects to leak authentication tokens.
Web security researcher who enjoys finding weird bugs.
articles
WEBThe Art of XS-Leak Attacks
A deep dive into frame-counting leaks and how they work internally in Chromium.