Skip to content
Eradicating image authentication injection from the entire internet
samcurry.net | blog | #bug-bounty | #browser-security | #web-security | #disclosure | #safari | #credential-prompt
Summary
Eradicating image authentication injection: subresources answering HTTP 401 could trigger browser credential prompts; persistent reports got Safari and others to fix it, retiring a bug class.
- Published
- Collected