Skip to content

Commit

Permalink
fix formatting
Browse files Browse the repository at this point in the history
  • Loading branch information
AzlanCoding committed Jun 23, 2024
1 parent 45bd8a5 commit d9dddcf
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion MyProgrammingJourney.md
Original file line number Diff line number Diff line change
Expand Up @@ -382,7 +382,7 @@ h1 {
<h3>Started Learning HTML, JavaScript and CSS</h3>
<p>As I got very vexed by the restrictions on my Chromebook controlled by Mobile Guardian, I started to look at Mobile Guardian's source code which was easy to access because it was a Chrome Extension. Through this, I discovered that Mobile Guardian did not check content in iframe elements, allowing blocked websites to be accessed through an Iframe. I thus set out to built my own website to test out this vulnerability. Soon I learnt restrictions like <code>X-Frame-Options</code> and <code>Content-Security-Policy</code> and how to get around them (through extensions). I developed the website into a Progressive Web App (for fun) and added the experimental tab strips for a more browser look. I also added full details of the exploit so that Mobile Guardian will hopefully find it and patch the vulnerability. You can find the exploit <a target="_blank" href="https://github.com/AzlanCoding/iframe-browser-pwa">here</a>.</p>
<div class="image-carousel">
<img src="https://raw.githubusercontent.com/AzlanCoding/azlancoding.github.io/main/iframe-browser/Screen%20recording%202022-06-30%2011.25.19.gif" data-desc="A screen recording of me using the iframe exploit to access a blocked website to demonstrate the exploit."></image>
<img src="https://raw.githubusercontent.com/AzlanCoding/azlancoding.github.io/main/iframe-browser/Screen%20recording%202022-06-30%2011.25.19.gif" data-desc="A screen recording of me using the iframe exploit to access a blocked website to demonstrate the exploit.">
<img src="https://raw.githubusercontent.com/AzlanCoding/azlancoding.github.io/main/iframe-browser/InstallGuidePhotos/13.png" data-desc="A screenshot of the PWA install prompt working taken from the <a href='https://azlancoding.github.io/iframe-browser/InstallGuide' target='_blank'>install guide</a>.">
<img src="https://raw.githubusercontent.com/AzlanCoding/azlancoding.github.io/main/iframe-browser/InstallGuidePhotos/2.png" data-desc="A screenshot of how to enable the experimental tab-strips feature that iframe-browser-pwa uses taken from the <a href='https://azlancoding.github.io/iframe-browser/InstallGuide' target='_blank'>install guide</a>.">
</div>
Expand Down

0 comments on commit d9dddcf

Please sign in to comment.