Return to Answer

Just came across this in my own research. For posterity, I found this https://blog.compass-security.com/2016/10/bypassing-content-security-policy-with-dns-prefetching/

TLDR; If a site is vulnerable to XSS but has strict Content Security Policy (CSP) which would limit cross-origin AJAX requests, DNS preflight can be used to exfiltrate data.

Just came across this in my own research. For posterity, I found this https://blog.compass-security.com/2016/10/bypassing-content-security-policy-with-dns-prefetching/

TLDR; If a site is vulnerable to XSS but has strict Content Security Policy (CSP) which would limit cross-origin fetch requests, DNS preflight can be used to exfiltrate data.

Just came across this in my own research. For posterity, I found this https://blog.compass-security.com/2016/10/bypassing-content-security-policy-with-dns-prefetching/

TLDR; If a site is vulnerable to XSS but has strict Content Security Policy (CSP) which would limit traditional AJAX requests, DNS preflight can be used to exfiltrate data.

Just came across this in my own research. For posterity, I found this https://blog.compass-security.com/2016/10/bypassing-content-security-policy-with-dns-prefetching/

TLDR; If a site is vulnerable to XSS but has strict Content Security Policy (CSP) which would limit cross-origin AJAX requests, DNS preflight can be used to exfiltrate data.

Just came across this in my own research. For posterity, I found this https://blog.compass-security.com/2016/10/bypassing-content-security-policy-with-dns-prefetching/

TLDR; If a site is vulnerable to XSS but has strict Content Security Policy (CSP), DNS preflight can be used to exfiltrate data.

Just came across this in my own research. For posterity, I found this https://blog.compass-security.com/2016/10/bypassing-content-security-policy-with-dns-prefetching/

TLDR; If a site is vulnerable to XSS but has strict Content Security Policy (CSP) which would limit traditional AJAX requests, DNS preflight can be used to exfiltrate data.