Scalable Vector Grief
Refract AI Intelligence Digest
I tested eight popular SVG sanitizers and bypassed six of them. In this post, I'll show you how a response header can run JavaScript in Firefox even when the response body is completely harmless XML.
Source: PortSwigger Research ·