writeups.xyz / Playing with DOMPurify custom elements handling

Submitter : c2a

Date: 15 February 2024

Bounty : undisclosed

Vulnerabilities :

• Mutation XSS
• Filter Bypass

Programs :

• DOMPurify

Authors :

• Mizu (@Kevin_mizu)

Link :
https://mizu.re/post/playing-with-dompurify-ce-handling