ReCAPTCHA on antoniusblock https://blog.antoniusblock.net/tags/recaptcha/ Recent content in ReCAPTCHA on antoniusblock Hugo -- gohugo.io en luca.p.fama@gmail.com (antoniusblock) luca.p.fama@gmail.com (antoniusblock) © 2026 antoniusblock Thu, 19 Mar 2026 16:43:00 +0100 From Self-XSS to PII leakage via WAF bypass, CSRF login and window.opener abuse https://blog.antoniusblock.net/posts/self-xss-csrf-login/ Thu, 19 Mar 2026 16:43:00 +0100 luca.p.fama@gmail.com (antoniusblock) https://blog.antoniusblock.net/posts/self-xss-csrf-login/ Turning a ‘0-impact’ self-XSS into a real bug: how chaining it with CSRF and browser behaviors can lead to significant impact and data leakage.