Skip to content
XS-Leak: Detecting IDs using Portal
portswigger.net | research | #browser-security | #portswigger | #side-channel | #css | #xs-leak | #portal | #x-frame-options
Summary
Gareth Heyes uses Chrome's experimental portal element to bypass X-Frame-Options and detect applications like phpMyAdmin via focus events, including a CSS-only variant.
- Published
- Collected