Uh⦠they leaked? How/where/etc, please?
Discussion
idk the details exactly but it was compromised
i asked many times but no one had given me an answer yet to how this happened and what other clients now do to prevent it
XSS vulnerability
thank you π₯³
Ugh. Thanks.
βCross-site scripting is a type of security vulnerability that can be found in some web applications. XSS attacks enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same-origin policy.β I understood nothing, is it possible this could still happen to me putting my nsec into these new clients ??
would like to know too.. and if it's also something that can happen with mobile apps
i see it can be done with phishing links

and can ppl do this with img urls too? they automatically open since we can see them, right?
