---
id: 5487
title: "Evading defences using VueJS script gadgets"
source_domain: portswigger.net
source_url: "https://portswigger.net/research/evading-defences-using-vuejs-script-gadgets"
published_at: "2022-09-07T09:05:00Z"
tags: ["xss", "waf-bypass", "csp-bypass", "mutation-xss", "vuejs", "script-gadgets"]
phying_url: "https://phying.com/item/5487"
lang: en
---

# Evading defences using VueJS script gadgets

## Summary

VueJS script gadgets for evading defences: expression-based vectors, event tricks and mutation XSS in the framework, useful for bypassing WAFs and CSP and for developers guarding Vue apps.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2022-09-07T09:05:00Z
- **Original:** https://portswigger.net/research/evading-defences-using-vuejs-script-gadgets
- **Phying News:** https://phying.com/item/5487