Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Our favourite community contributions to the XSS cheat sheet

portswigger.net | research | #xss | #community | #payloads | #cheat-sheet | #angularjs | #vuejs

Summary

A rundown of the seven best community submissions to PortSwigger's XSS cheat sheet: shorter Vue and AngularJS vectors, the obscure onbeforeinput event, and a WAF-evading base64-encoded payload.
Published
Collected

original ↗

Related coverage

  1. Adapting AngularJS payloads to exploit real world applications (portswigger.net)
  2. XSS without HTML: Client-Side Template Injection with AngularJS (portswigger.net)
  3. DOM based AngularJS sandbox escapes (portswigger.net)
  4. Documenting the impossible: Unexploitable XSS labs (portswigger.net)
  5. What's in a tag name? JavaScript, apparently (portswigger.net)
  6. CRLF-Powered Desync Attacks: Beheading HTTP Streams (portswigger.net)

back