shrey-web opened this issue 2 years ago · 0 comments
i have discovered if there is a broken screenshot, then xless does not generate blind xss report to slack but sends oob callback report instead. for example xss through uploaded svg files.