---
id: 4894
title: "Exploring JavaScript's exploits: A deep dive into XSS vulnerabilities"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/learn-bug-bounty/javascript-language-made-for-bugs"
published_at: "2022-12-08T08:25:00Z"
tags: ["bug-bounty", "web-security", "xss", "exploitation", "javascript", "payloads", "dom"]
phying_url: "https://phying.com/item/4894"
lang: en
---

# Exploring JavaScript's exploits: A deep dive into XSS vulnerabilities

## Summary

A tour of quirky JavaScript behaviours - function call tricks, Unicode newlines, non-standard comments and hoisting - and how attackers weaponise them in XSS payloads and exploitation frameworks.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2022-12-08T08:25:00Z
- **Original:** https://www.yeswehack.com/learn-bug-bounty/javascript-language-made-for-bugs
- **Phying News:** https://phying.com/item/4894