Skip to content
Getting XXE in Web Browsers using ChatGPT
swarm.ptsecurity.com | research | #browser-security | #xxe | #chatgpt | #same-origin-policy | #xslt | #svg
Summary
Can a JavaScript-less page read local files? ChatGPT-generated samples expose browser XSL/XML vectors — XSLT, XInclude and document() — that reach file:// content despite the SOP.
- Published
- Collected