writeups.xyz / Bypassing DOMPurify with good old XML

Submitter : c2a

Date: 1 April 2024

Bounty : undisclosed

Vulnerabilities :

• WAF Bypass
• XSS

Programs :

• DOMPurify

Authors :

• RyotaK (@Ryotkak)

Link :
https://flatt.tech/research/posts/bypassing-dompurify-with-good-old-xml/