XSS on Facebook-Instagram CDN Server bypassing signature protection

Facebook and Instagram all photos/videos and more content are stored on their CDN Server. Such one of “*.fbcdn.net” and “*.cdninstagram.com” and they served via various sub-domains. Those all of the photos/videos on CDN Server contain a signature in the URL (various parameters “oh” and “oe” etc), which causes an error to be thrown if we […]