Skip to content
Abusing JavaScript frameworks to bypass XSS mitigations
portswigger.net | research | #xss | #portswigger | #bypass | #noscript | #dom-based | #mavo | #javascript-framework
Summary
Gareth Heyes abuses the Mavo JavaScript framework's $url object to build DOM-based XSS that bypasses NoScript's XSS filter, and shows risks from attacker-controlled data sources.
- Published
- Collected