A M Ahmad Muztaba

icon company @SELISEdigitalplatforms icon location Today I know better than the yesterday. Still many things to learn ,a far way to go .

Results 1 issues of A M Ahmad Muztaba

SignalR is exposing access_token in query params

3 comment

### SignalR is sending access_token in the query parmeter . But in a recent pentest, it is shown as a 'two bomb finding'. I have gone though "https://learn.microsoft.com/en-us/aspnet/core/signalr/security?view=aspnetcore-7.0" -where Microsoft...