Provoking browser quirks with behavioural fuzzing
portswigger.net | research | #firefox | #fuzzing | #xss | #portswigger | #hackvertor | #browser-quirks | #html-parser
Summary
Gareth Heyes applies behavioural fuzzing to Firefox's HTML and JavaScript parsers, uncovering quirks like alternative HTML comment terminations that can aid XSS filter bypasses.
- Published
- Collected
--- id: 5511 title: "Provoking browser quirks with behavioural fuzzing" source_domain: portswigger.net source_url: "https://portswigger.net/research/provoking-browser-quirks-with-behavioural-fuzzing" published_at: "2019-05-29T12:16:00Z" tags: ["firefox", "fuzzing", "xss", "portswigger", "hackvertor", "browser-quirks", "html-parser"] phying_url: "https://phying.com/item/5511" lang: en --- # Provoking browser quirks with behavioural fuzzing ## Summary Gareth Heyes applies behavioural fuzzing to Firefox's HTML and JavaScript parsers, uncovering quirks like alternative HTML comment terminations that can aid XSS filter bypasses. ## Intelligence Metadata - **Sources:** portswigger.net - **Published:** 2019-05-29T12:16:00Z - **Original:** https://portswigger.net/research/provoking-browser-quirks-with-behavioural-fuzzing - **Phying News:** https://phying.com/item/5511