#293689 Query parameter reordering causes redirect page to render unsafe URL@kenziy found a reflected Cross-Site Scripting (XSS) vulnerability that was exploitable in Internet Explorer due to the CSP being ignored. The root cause of the vulnerability was rather interesting. In production, we had "Query String Sort" enabled in the Cloudflare caching settings. This is why we couldn't reproduce the same behavior in our local development environments. When Cloudflare...
Valve disclosed on HackerOne: Xss was found by exploiting the URL...
