Reflected XSS protected by very strict CSP, with dangling markup attack (Video solution, Audio)

[@vidchan4247]

This video would be far more helpful if you actually explained the mechanism (WHY it works), instead of just going through the steps which can be read in the solutions to the lab as well.

[@cair0_]

i can't even imaging how did u think of this solution :(

[@mazleens]

instead of assuming that there is an XSS vuln in the email param, why don't you demonstrate it? the challenge does not mention anything (find out yourself).

[@chadurdy7555]

Aloha! okay so I've tried every possible (to my limited knowledge) scenerio and can't seem to get the DNS/ HTTP interactions to show in the poll collaborator interactions window. Any insight would be greatly appreciated. Also thank you so much for your videos!! Truely a great and helpful suppliment to the Portswigger labs.

[@chadurdy7555]

@Simon Hitchens unfortunately no I did not.

[@kilohsakul]

Giving us the solution is nice enough, but I was expecting an exaplanation too.

[@camilohurtado4814]

Has anybody been able to solve this lab recently?

[@mscreative3262]

Nooo, have you solved or not ?

[@Karmik_bhavya]

@@mscreative3262 i tried every freaking method even with burp collaborator its just not getting the robot user to click on the link

[@defaultbykoyomi4371]

I cannot resolve as well. the burp collaborator is not getting for robot user to click.

[@camilohurtado4814]

I wasn't able to either.

[@fmworld4219]

Same here

[@Nul1Secur1ty]

;)