add another href

xanhacks · May 1, 2024 · b5bdc8b · b5bdc8b
1 parent 38dc0d3
commit b5bdc8b
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/content/docs/client-side/csp.md b/content/docs/client-side/csp.md
@@ -99,4 +99,5 @@ i.Event.prototype.flags="-alert(location.href)"
 ```
 
 **References:**
-- [Arbitrary Parentheses-less XSS against strict CSP policies](https://terjanq.medium.com/arbitrary-parentheses-less-xss-e4a1cf37c13d)
+- [Arbitrary Parentheses-less XSS against strict CSP policies](https://terjanq.medium.com/arbitrary-parentheses-less-xss-e4a1cf37c13d)
+- [XSS with CSP bypass leads to diagrams backdoor in jgraph/drawio](https://huntr.com/bounties/4c1c5db5-210f-4d7e-8380-b95f88fdb78d)