Skip to content
LEXSS: Bypassing Lexical Parsing Security Controls
bishopfox.com | vulnerability | #web-security | #xss | #vulnerability | #parsing | #sanitization | #lexss
Summary
Introducing LEXSS: XSS that bypasses lexical sanitizers by abusing mismatches between HTML parsing and lexical parsing, letting special HTML tags run JavaScript where filters were believed effective.
- Published
- Collected