3 ms·
Can I upload such image for instance to facebook and intent to run it as html (with some JS inside)?
by haddr 10y ago
Can I upload such image for instance to facebook and intent to run it as html (with some JS inside)?
- nickfrostatx 10y agoThey usually set the content type to that of an image so the browser won't execute the JS. They've messed this up in the past, see this legendary bug bounty report [1] 1. https://whitton.io/articles/xss-on-facebook-via-png-content-types/ https://whitton.io/articles/xss-on-facebook-via-png-content-...