Skip to content
DOM Clobbering strikes back
portswigger.net | research | #browser-security | #xss | #research | #portswigger | #client-side | #dom-clobbering
Summary
Gareth Heyes revives DOM Clobbering with new techniques for clobbering three levels deep via DOM collections, plus interactive labs, after the technique was used to exploit GMail.
- Published
- Collected