Skip to content
When alert fails: exploiting transient events
portswigger.net | research | #web-security | #xss | #waf-bypass | #transient-events | #sendbeacon | #onpagehide
Summary
Exploiting transient events like onpagehide when prompts are blocked: fetch and XHR cannot complete as pages unload, but navigator.sendBeacon lets payloads exfiltrate cookies and DOM data.
- Published
- Collected