---
id: 5508
title: "One XSS cheatsheet to rule them all"
source_domain: portswigger.net
source_url: "https://portswigger.net/research/one-xss-cheatsheet-to-rule-them-all"
published_at: "2020-09-04T14:33:00Z"
tags: ["browser-security", "xss", "portswigger", "waf-bypass", "payload", "css", "cheatsheet"]
phying_url: "https://phying.com/item/5508"
lang: en
---

# One XSS cheatsheet to rule them all

## Summary

Gareth Heyes launches PortSwigger's XSS cheatsheet, packed with novel filter-bypass vectors such as :target CSS transitions and hash-triggered focus events, each with a hosted PoC.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2020-09-04T14:33:00Z
- **Original:** https://portswigger.net/research/one-xss-cheatsheet-to-rule-them-all
- **Phying News:** https://phying.com/item/5508