Forcing Firefox to Execute XSS Payloads during 302 Redirects

gremwell.com – During a recent engagement I identified an open redirect where a GET parameter would be reflected as-is in the HTTP response Location header without any kind of sanitization. Something similar to thi…

Tweeted by @TheHackersNews https://twitter.com/TheHackersNews/status/1311712936964964352