https://blog.voorivex.team/css-data-exfiltration-to-steal-oauth-token
https://x.com/amirmsafari/status/1890816005422686400?s=46
https://blog.voorivex.team/css-data-exfiltration-to-steal-oauth-token
https://blog.voorivex.team/css-data-exfiltration-to-steal-oauth-token
Voorivex Team
CSS Data Exfiltration to Steal OAuth Token
A DOMPurify-allowed style tag chained with a Google Ads sandbox reflection turned a harmless HTMLi into an OAuth-token leak. $9,700 in bounties, full exploit code.
12
1February 16, 2025 2.8K 8
