Skip to content
Abusing Redirect Discrepancies to leak secrets in URLs
ethiack.com | research | #secrets | #web-security | #research | #open-redirect | #browser | #ethiack | #secret-leakage
Summary
Ethiack shows how server and browser redirect discrepancies, including Chrome's ERR_TOO_MANY_REDIRECTS page, can halt redirect chains early and leak secrets carried in URL paths and fragments.
- Published
- Collected