expressCart icon indicating copy to clipboard operation
expressCart copied to clipboard
verified publisher icon mrvautin

Frame Injection

Open NinjaGPT opened this issue 5 months ago • 0 comments

Summary

User-controlled img src allows loading untrusted frames, enabling internal service probe & info gathering, content manipulation within trusted contexts.

POC

Image Image

NinjaGPT avatar Aug 04 '25 03:08 NinjaGPT