Skip to content

Commit be70924

Browse files
authored
Updated wording in template.md
1 parent 023a3d6 commit be70924

File tree

1 file changed

+1
-1
lines changed
  • submissions/description/sensitive_data_exposure/via_localstorage_sessionstorage/non_sensitive_token

1 file changed

+1
-1
lines changed

submissions/description/sensitive_data_exposure/via_localstorage_sessionstorage/non_sensitive_token/template.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ This vulnerability can lead to data theft through the attacker’s ability to ac
99
1. Use a browser to navigate to: {{URL}}
1010
1. Right click on the page, select Inspect, then select Storage, then Local (or Session) Storage
1111
1. Observe the exposed sensitive token: {{screenshot}}
12-
1. In a new browser window, perform {{action}} to show that the token in `localStorage`/`sessionStorage` can be used to generate a user session: {{screenshot}}
12+
1. In a new private browser window, perform {{action}} to show that the token in `localStorage`/`sessionStorage` can be used to access a user's session or data: {{replace these brackets with a screenshot}}
1313

1414
**Proof of Concept (PoC)**
1515

0 commit comments

Comments
 (0)