He found a way to Hijack Private Google Docs Screenshots with a clever hack - Google paid him $4000

The Backend Engineering Show with Hussein Nasser - A podcast by Hussein Nasser

Categories:

Technology

A vulnerability in Google Feedback component in postMessage allowed this security researcher to find a way to hijack private screenshots   https://blog.geekycat.in/google-vrp-hijacking-your-screenshots/ https://developer.mozilla.org/en-US/docs/Web/API/Window/postMessage