DOM Purify Type Confusion by @slonser_
How?
1. DOM Purify converts XML tags to HTML comment tags
2. Leaving the closing bracket empty, escapes to an HTML context allowing for onerror="alert(1)" and other fun stuff!
Sign up to get updates from us
