From TFA Fix Facebook quickly hot-fixed the issue by removing the forward DNS en... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

SixSigma on March 17, 2016 | parent | context | favorite | on: An XSS on Facebook via PNGs and Wonky Content Type...

From TFA

Fix

Facebook quickly hot-fixed the issue by removing the forward DNS entry for photo.facebook.com.

https://fin1te.net/images/facebookxss/facebook-xss-12.png

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact