Blog

Writing

Notes on application security, automation, and secure engineering.

Bypassing a 3 layer SVG sanitizer: Stored XSS in Mozilla

The bypass, the parser differential, and the missing write().

Bug BountyMozillaXSSSVG