Skip to content
Escaping JavaScript sandboxes with parsing issues
portswigger.net | research | #fuzzing | #web-security | #sandbox-escape | #safari | #unicode-escapes | #javascriptcore
Summary
Fuzzing JavaScriptCore uncovered 721,520 inconsistently parsed Unicode escapes in Safari, where typeof\u{10ffdc} splits across parser paths — a class of issues that can escape JS sandboxes.
- Published
- Collected