XSS and cache poisoning via upload.twitter.com on ton.twitter.com

Cross Site Scripting (XSS)

attackers can bypass the upload restriction on upload.twitter.com to cause XSS on ton.twitter.com and cache poisoning.

https://hackerone.com/reports/84601