https://blog.mingon.dev/tags/form-hijacking/Recent content in Form Hijacking on 보안 연구 노트Hugo -- gohugo.ioko-KRMon, 08 Jun 2026 13:00:00 +0900https://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---reflected-xss-protected-by-very-strict-csp-with-dangling-markup-attack/Mon, 08 Jun 2026 13:00:00 +0900https://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---reflected-xss-protected-by-very-strict-csp-with-dangling-markup-attack/외부 리소스를 제한하는 엄격한 CSP에서 누락된 form-action을 이용해 폼 제출 목적지를 바꾸고 CSRF 토큰을 획득하는 풀이