---
id: 5494
title: "Documenting the impossible: Unexploitable XSS labs"
source_domain: portswigger.net
source_url: "https://portswigger.net/research/documenting-the-impossible-unexploitable-xss-labs"
published_at: "2020-06-04T09:31:00Z"
tags: ["web-security", "xss", "payloads", "challenges", "cheat-sheet", "impossible-labs"]
phying_url: "https://phying.com/item/5494"
lang: en
---

# Documenting the impossible: Unexploitable XSS labs

## Summary

The XSS cheat sheet gains an 'impossible labs' section: eight scenarios its researchers couldn't exploit, from 15-character length limits to blocked events, with a challenge to solve the impossible.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2020-06-04T09:31:00Z
- **Original:** https://portswigger.net/research/documenting-the-impossible-unexploitable-xss-labs
- **Phying News:** https://phying.com/item/5494