---
id: 5511
title: "Provoking browser quirks with behavioural fuzzing"
source_domain: portswigger.net
source_url: "https://portswigger.net/research/provoking-browser-quirks-with-behavioural-fuzzing"
published_at: "2019-05-29T12:16:00Z"
tags: ["firefox", "fuzzing", "xss", "portswigger", "hackvertor", "browser-quirks", "html-parser"]
phying_url: "https://phying.com/item/5511"
lang: en
---

# Provoking browser quirks with behavioural fuzzing

## Summary

Gareth Heyes applies behavioural fuzzing to Firefox's HTML and JavaScript parsers, uncovering quirks like alternative HTML comment terminations that can aid XSS filter bypasses.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2019-05-29T12:16:00Z
- **Original:** https://portswigger.net/research/provoking-browser-quirks-with-behavioural-fuzzing
- **Phying News:** https://phying.com/item/5511