GitHub Security Lab · Report #920285
[javascript] CWE-020: CodeQL query to detect missing origin validation in cross-origin communication via postMessage
16upvotes
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.