Et3rnos comments

Repositories
Issues
Comments

Results 1 comments of


                                            Et3rnos

SignalR is exposing access_token in query params

> What about HTTP server logs? I got a negative pentest result from passing access tokens in the URI parameter. > > A web socket upgrade request is actually a...