Top 10 winner

Google Search XSS

LiveOverflow · YouTube · 7 April 2019

Explains how a Google Search XSS was found: fuzzing pairs of HTML tags through different parsing paths and diffing what a sandboxed iframe, DOMParser and createHTMLDocument produce, which exposes noscript and noembed parsing differently when scripting is disabled. The resulting parser differential mutates sanitized markup into script execution and bypassed two sanitizers.

Record

Researcher

LiveOverflow

Published by

YouTube

Date

7 April 2019

Format

Recording

In the archive

• Ranked #5 in the 2019 Top 10 Web Hacking Techniques

Related sources

• Independent video analysis

Tags

• mutation-xss
• parser-differential
• sanitizer-bypass
• xss
• fuzzing
• dom
• iframe
• javascript
• case-study
• owasp-a03-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of LiveOverflow, first published at the original source. Preserved copies are kept so the citation survives its host.