writeups.xyz / DOM Purify - untrusted Node bypass

Submitter : c2a

Date: 19 March 2024

Bounty : undisclosed

Vulnerabilities :

• WAF Bypass
• XSS

Programs :

• DOMPurify

Authors :

• Vsevolod Kokorin (Slonser_)

Link :
https://blog.slonser.info/posts/dompurify-node-type-confusion/