diff --git a/_posts/2022-09-01-noscript.md b/_posts/2022-09-01-noscript.md index 1e210ad..d1af884 100644 --- a/_posts/2022-09-01-noscript.md +++ b/_posts/2022-09-01-noscript.md @@ -9,7 +9,7 @@ Disabling JS works by setting the following [CSP](https://developer.mozilla.org/ ``` noscript-marker; script-src 'none'; object-src 'none'; media-src 'none'; font-src 'none'; script-src-elem 'none'; script-src-attr 'none'; worker-src 'none' ``` -So, in order to bypass it you need to find somewhere the CSP is not enforced like [this](https://bugs.chromium.org/p/chromium/issues/detail?id=1291060) or a PDF. +So, in order to bypass it you need to find somewhere the CSP is not enforced like [this](https://issues.chromium.org/issues/40058593) or a PDF. # Cross-tab Identity Leak Protection Due to a flaw in cutting tab ties it did not think tabs where related when there was still a window reference.