How to Bypass CSP by Hiding JavaScript in a PNG Image
Hide a malicious JavaScript library in a PNG image and tweet it, then include it in a vulnerable website by exploiting a XSS bypassing its Content-Security-Policy (CSP). (more…)
Read more »Nameless JavaScript – Making client/server communication easier by using actions
nameless-js – Nameless is a utility that allows actions to be dispatched from the client that will trigger server side functionality. Useful for updating data on the server using things like Redux.