Add Overwolf to the protocol handler blog

parsiya / parsiya.net

Source for my personal website

https://parsiya.net

11 stars 8 forks source link

Open parsiya opened 3 years ago

parsiya commented 3 years ago

Location: 2021-03-17-attack-surface-analysis-2-custom-uri
Problem: This is not there - https://swordbytes.com/blog/security-advisory-overwolf-1-click-remote-code-execution-cve-2021-33501/
Solution: Add this bug and discuss it briefly. ~~Talk a bit about CEF and the Javascript bridge. New blog about the bridge? E.g., JavaScript bridge in Desktop application and XSS? or similar things.~~

parsiya commented 3 years ago

JavaScript bridge was published in 6cd29289e2def11125b4bcc7d13a04e38099e35c.

Need to just add the bug to the protocol handler blog and discuss it there.