Awesome find! @avlidienbrunn #CSRF #Vimeo
@daevlin Thanks, later I discovered it's actually the same (broken patch?) as this 7 (!) year old bug: http://lists.webappsec.org/pipermail/websecurity_lists.webappsec.org/2011-February/007595.html …
-
-
@avlidienbrunn Ouch! Anyway, nice bounty. :)Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.