3 ms·
Very well written blogpost, but it would be nice if they didn't downplay the severity of the original blog post: A PoC of how you could clone private repositor
by 0x0 14y ago
Very well written blogpost, but it would be nice if they didn't downplay the severity of the original blog post:
A PoC of how you could clone private repositories, such as the github.com source code itself at github.com/github/github (as an assumed example)
- homakov 14y agoUntil the fix everything was possible. I think they meant "within this few weeks period you could not fixate CSRF token"