An XSS on Facebook via PNGs & Wonky Content Types

Bug Bounty & Application Security

27 Jan 2016 ... Content uploaded to Facebook is stored on their CDN, which is served via various domains (most of which are sub-domains of either ...