---
id: 5477
title: "Hunting nonce-based CSP bypasses with dynamic analysis"
source_domain: portswigger.net
source_url: "https://portswigger.net/research/hunting-nonce-based-csp-bypasses-with-dynamic-analysis"
published_at: "2021-09-17T14:00:00Z"
tags: ["xss", "burp-scanner", "dynamic-analysis", "nonce", "csp", "script-gadgets"]
phying_url: "https://phying.com/item/5477"
lang: en
---

# Hunting nonce-based CSP bypasses with dynamic analysis

## Summary

How dynamic analysis flagged a nonce-based CSP bypass on portswigger.net: an injected element hijacked a querySelector to control a script URL, defeating what was thought to be a stricter policy.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2021-09-17T14:00:00Z
- **Original:** https://portswigger.net/research/hunting-nonce-based-csp-bypasses-with-dynamic-analysis
- **Phying News:** https://phying.com/item/5477