---
id: 5683
title: "Web2 bug repellant instructions"
source_domain: osec.io
source_url: "https://osec.io/blog/web2-bug-repellant-instructions/"
published_at: "2023-08-11T00:00:00Z"
tags: ["web3", "xss", "csrf", "marketplace", "frontend-security", "nft"]
phying_url: "https://phying.com/item/5683"
lang: en
---

# Web2 bug repellant instructions

## Summary

OtterSec surveys Web2 attack surface in Web3 apps — XSS via unsanitized NFT metadata on Rocki, malicious approval prompts, CSRF/XSS sinks — with practical mitigations.

## Intelligence Metadata

- **Sources:** osec.io
- **Published:** 2023-08-11T00:00:00Z
- **Original:** https://osec.io/blog/web2-bug-repellant-instructions/
- **Phying News:** https://phying.com/item/5683