Stealing passwords from infosec Mastodon - without bypassing CSP

#infosec #mastodon #garethheyes #vulnerability
#html #sourcecode #devtools #autofill #glitchfork

https://portswigger.net/research/stealing-passwords-from-infosec-mastodon-without-bypassing-csp