// archive
Tag: Content Spoofing
BUG BOUNTY WRITEUPS
Content Spoofing in Microsoft Edge
// TL;DR After an earlier address-bar spoofing bug I reported in Edge was fixed as CVE-2018-8383, I found a related issue in the same area: Edge…
BUG BOUNTY WRITEUPS
Content Injection in Instagram’s Password-Reset Page
// TL;DR I found a content injection (content spoofing) issue on Instagram’s password-reset confirmation page. A query parameter on the page was reflected directly into the…