Skip to content
Fuzzing for XSS via nested parsers condition
Summary
A fuzzing technique for finding XSS in message-markup parsers (BBCode, Markdown, AsciiDoc, reStructuredText) by exploiting nested parser conditions, which uncovered vulnerabilities in popular products that had gone unnoticed. Presented at Power of Community 2021.
- Published
- Collected