XSS in OAuth flow of Paypal
One fine night while tinkering with Paypal's REST API lead to XSS in their OAuth flow. Paypal REST API provides a simple payment solution, but analyzing the authentication revealed it was only client-side validation.
One fine night while tinkering with Paypal's REST API lead to XSS in their OAuth flow. Paypal REST API provides a simple payment solution, but analyzing the authentication revealed it was only client-side validation.
One fine night when I was editing my Blogger Account I found an awkward behavior. Upon digging a bit, I discovered an XSS vulnerability that could be exploited using data URIs [...]