Stealing passwords from infosec Mastodon – without bypassing CSPportswigger.net20 pointstosh4 years ago