google-research / google-research/google-research
DOM Injection on Gemini
- Dominant language
- Jupyter Notebook
- Stars
- 38.8k
- Forks
- 8.5k
- PR merge metrics
- No merged PRs in 30d
Description
Description: Gemini has been iff all day. As per feedback, I can tell through a million different ways. This is one way.
Step 1. Go To Dev Tools
Step 2. Access Elements
Step 3. Insert Script with the a
Step 4. Insert it in the src code to just to do it
Step 5. Repeat steps to console
Step 6. Successful
But screen shit acted weird, they are either in the api, or SQL
Step 7. Rumor has it, a Admin on the Google Cloud SQL Query Machine.
Contributor guide
Research direction
No repository file, test, or code entry point is identified. Start by reviewing the attached image and reproducing the reported steps in Dev Tools, Elements, and the console; determine whether a script injection occurs and whether the API or Cloud SQL is affected. Done means a confirmed, scoped security issue with reproducible evidence and an identified project component.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- google-cloud, javascript, sql
- Domain
- api, databases, security, web-dev
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 15/100