MXSS Explained: Server Side HTML Sanitizers are Doomed to Fail with this XSS!

[@LiveOverflow]

amazing work! Keep going!

[@mrgavyadha]

💪

[@eingengraou1288]

he's doing tutorials like you, i love how you explain why the bug happens , now your video just shows that even if a site uses front end frameworks with saniters they're still hackable

[@abdulx01]

Nice.. This is very complex and underrated vulnerability that every researchers avoid. Thanks for sharing, I'm very excited and interested to learn about this mXSS. Finally someone made it. Thank guru. ❤

[@chiragartani]

Very hard to create videos like this, I can understand. Amazing video, Keep it up brother👌🙏

[@vibhakarvaddi1858]

Really amazed by the concept and your explanation anna. Keep going

[@0xphsi]

Excellent explanation of a rather complex issue, good stuff!

[@amoh96]

really good video explain well keep more videos like this

[@nodistractionsjustgoandstu1842]

I made a challenge on this for IRON CTF 2024 its on oct 5

[@parsh_patel]

nice explanation

[@0xrudrapratap]

Good video, great animations

[@RR-bz8bi]

function foo(string $value): bool {
$paterns = ["]+(?:\s+on[a-z]+)"];
$invalid = 0;
foreach ($paterns as $patern) {
if (preg_match("/{$patern}/i", $value)) {
$invalid++;
}
}
return $invalid == 0;
}
$string = '';
foo($string); // return false;

[@mrgavyadha]

alert(1) :)

[@RR-bz8bi]

@@mrgavyadha
$paterns = [
"]*>",
"]+(?:\s+on[a-z]+)",
// etc.
];
:)