Stealing passwords from infosec Mastodon - without bypassing CSP | PortSwigger Research

https://portswigger.net/research/stealing-passwords-from-infosec-mastodon-without-bypassing-csp

https://twitter.com/home/status/1592688148622249984

https://twitter.com/home/status/1592694005610909696

https://twitter.com/home/status/1592697976132337665

https://twitter.com/home/status/1592714110386712578

https://twitter.com/home/status/1592725407903760385

https://twitter.com/home/status/1592730135735963648

https://twitter.com/home/status/1592766125305397249

https://twitter.com/home/status/1592776048697303040

https://twitter.com/home/status/1592781322212474880

https://twitter.com/home/status/1592788503800471552

https://twitter.com/home/status/1592796613852135425

https://twitter.com/home/status/1592816658229649408

https://twitter.com/home/status/1592828433675227138

https://twitter.com/home/status/1592830243290886144

https://twitter.com/home/status/1592832122620121088

https://twitter.com/home/status/1592903587868610561