X (Formerly Twitter) disclosed on HackerOne: Periscope iOS app CSRF...
Summary
This issue is mainly in the Periscope iOS app against CSRF follow action using deeplink.
as the report #583987 the CSRF work on iOS app
POC 1
QR code to follow periscope profile
`pscp://user/periscopeco/follow
`
███████
POC2 by kunal94
```
<html>
<a href="pscp://user/<any user-id>/follow">CSRF DEMO</a>
</html>
```
video
█████████
## Imp…
hackerone.com