4 ms·Self-XSS to Site-Wide CSRF on Twitter2 points by karma20 7y agoHitton 7y agoCool, I liked it included blind alleys, too often people include just what worked to seem smarter.karma20 7y agoFor sure. It definitely echoes the thrill of bug-hunting when you know you’ve found something interesting but need to dig a bit deeper.