ampproject / ampproject/worker-dom
XSS in AMP CDN
Open
security
- Dominant language
- TypeScript
- Stars
- 3.3k
- Forks
- 154
- PR merge metrics
- No merged PRs in 30d
Description
1. Go to https://attack.shhnjk.com/ampToken.html
2. Wait for 2 seconds
3. Right-click the link and click on open in new tab
Tested in Chrome 😊
Contributor guide
Assessment
This issue has not been assessed yet.