
Researchers chain Cloudflare image flaws into a CSP-bypass XSS
A public write-up shows script execution via /cdn-cgi/image/ using an SVG namespace bug and a Chromium cache quirk.
3
1 stories, newest first · one card per story

A public write-up shows script execution via /cdn-cgi/image/ using an SVG namespace bug and a Chromium cache quirk.
Today 617 readers · 742 views · 563 reads · all time 158K views