Other nomination
DOM-based race condition: racing in the browser for fun - RyotaK's Blog
Libraries such as AngularJS bind their attributes only after the page has loaded, so HTML pasted into a contenteditable element before the library script runs is later evaluated as a template expression and gives XSS. The roughly 30 ms window is stretched to seconds by exhausting Chromium's 256-socket connection pool to stall the library's fetch.
Record
- Researcher
- RyotaK
- Date
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of RyotaK, first published at the original source. Preserved copies are kept so the citation survives its host.