Please don't report open redirects if you can't increase impact ! , I just found a xss to account take over, and it was a duplicate of p4 open redirect 😑😑 wtfff
#bugbounty#bugbountytip
@YShahinzadeh and I created two postMessage challenges based on real-world cases, it's commonly used by developers to secure postMessages
this is the first one, can you exploit it?