MXSS Explained: Server Side HTML Sanitizers are Doomed to Fail with this XSS!

[@LiveOverflow]

amazing work! Keep going!

[@mrgavyadha]

💪

[@eingengraou1288]

he's doing tutorials like you, i love how you explain why the bug happens , now your video just shows that even if a site uses front end frameworks with saniters they're still hackable

[@abdulx01]

Nice.. This is very complex and underrated vulnerability that every researchers avoid. Thanks for sharing, I'm very excited and interested to learn about this mXSS. Finally someone made it. Thank guru. ❤

[@chiragartani]

Very hard to create videos like this, I can understand. Amazing video, Keep it up brother👌🙏

[@vibhakarvaddi1858]

Really amazed by the concept and your explanation anna. Keep going

[@0xphsi]

Excellent explanation of a rather complex issue, good stuff!

[@amoh96]

really good video explain well keep more videos like this

[@0xrudrapratap]

Good video, great animations

[@nodistractionsjustgoandstu1842]

I made a challenge on this for IRON CTF 2024 its on oct 5

[@pareshankoko]

nice explanation

[@RR-bz8bi]

function foo(string $value): bool { $paterns = ["]+(?:\s+on[a-z]+)"]; $invalid = 0; foreach ($paterns as $patern) { if (preg_match("/{$patern}/i", $value)) { $invalid++; } } return $invalid == 0; } $string = ''; foo($string); // return false;

[@mrgavyadha]

alert(1) :)

[@RR-bz8bi]

@@mrgavyadha $paterns = [ "]*>", "]+(?:\s+on[a-z]+)", // etc. ]; :)

[@kushalkumar6414]

@@RR-bz8bi alert(1)