Skip to content
Bypassing Firefox's HTML Sanitizer API
portswigger.net | research | #browser-security | #firefox | #xss | #svg | #html-sanitizer | #sanitizer-bypass
Summary
Gareth Heyes bypassed Firefox's HTML Sanitizer API: SVG 'use' elements importing same-origin absolute URLs still executed JavaScript, even for uploads protected with Content-Disposition: attachment.
- Published
- Collected