Evading defences using VueJS script gadgets
portswigger.net | research | #xss | #waf-bypass | #csp-bypass | #mutation-xss | #vuejs | #script-gadgets
Summary
VueJS script gadgets for evading defences: expression-based vectors, event tricks and mutation XSS in the framework, useful for bypassing WAFs and CSP and for developers guarding Vue apps.
- Published
- Collected
Skip to content