Stealing passwords from infosec Mastodon - without bypassing CSP

https://portswigger.net/research/stealing-passwords-from-infosec-mastodon-without-bypassing-csp

…