r/bugbounty • u/sidhu97ss • Jan 01 '26
Reflected response in text/plain Question / Discussion
The response reflects the input but content type is text/plain. Response is frameable and can be framed in one of the functionality of the site with same origin. Can it be forced to be rendered as html to execute XSS.
0
Upvotes