MXSS Explained: Server Side HTML Sanitizers are Doomed to Fail with this XSS!

[@LiveOverflow]

amazing work! Keep going!

[@mrgavyadha]

💪

[@abdulx01]

Nice.. This is very complex and underrated vulnerability that every researchers avoid. Thanks for sharing, I'm very excited and interested to learn about this mXSS. Finally someone made it. Thank guru. ❤

[@chiragartani]

Very hard to create videos like this, I can understand. Amazing video, Keep it up brother👌🙏

[@amoh96]

really good video explain well keep more videos like this

[@parsh_patel]

nice explanation

[@0xrudrapratap]

Good video, great animations

[@olek-wc6qg]

Good visibility .Thanks

[@nodistractionsjustgoandstu1842]

I made a challenge on this for IRON CTF 2024 its on oct 5

[@RR-bz8bi]

function foo(string $value): bool {
$paterns = ["]+(?:\s+on[a-z]+)"];
$invalid = 0;
foreach ($paterns as $patern) {
if (preg_match("/{$patern}/i", $value)) {
$invalid++;
}
}
return $invalid == 0;
}
$string = '';
foo($string); // return false;

[@mrgavyadha]

alert(1) :)

[@RR-bz8bi]

@@mrgavyadha
$paterns = [
"]*>",
"]+(?:\s+on[a-z]+)",
// etc.
];
:)