1. Stealing passwords from infosec Mastodon - without bypassing CSP research | 2022-11-16 11:49 | portswigger.net | original ↗ | #credential-theft | #web-security | #xss