←back to thread

Hardening the Firefox Front End with Content Security Policies

(attackanddefense.dev)
182 points evilpie | 1 comments | 09 Apr 25 09:34 UTC | HN request time: 0.706s | source
Show context
SebFender ◴[09 Apr 25 11:38 UTC] No.43631014[source]▶
CSP is a soothing cream but is most usually easily bypassed by other simple attacks relying on poor DOM management and security - to this day my team has never found so many web vulnerabilities just going into the DOM...
replies(1): >>43631204 #
sixaddyffe2481 ◴[09 Apr 25 12:11 UTC] No.43631204[source]▶
Their blog has a lot of posts on trying to attack Firefox. If it's so simple, why are you not in the bug bounty hall of fame? :)
replies(2): >>43639666 #>>43640632 #
1. SebFender ◴[10 Apr 25 01:10 UTC] No.43639666[source]▶
Professional limits...