mXSS

mXSS Tuesday, 6 May 2014 Mutation XSS was coined by me and Mario Heiderich to describe an XSS vector that is mutated from a safe state into an unsafe unfiltered state. The most common form of mXSS is from incorrect reads of innerHTML. A good example of mXSS was discovered by Mario where the listing element mutated its contents to execute XSS. <listing>&lt;img src=1 onerror=alert(1)&gt;</listing> W

[efcl]

Mutation XSSについて

[ya--mada]

こうゆうのってどうやってアタリつけてんだろ

[motohiro6293]

mXSS

[Marin_MTB]

またIEか。

[mainyaa]

“Mutation XSS”

[hasegawayosuke]

<listing>&lt;img src=1 onerror=alert(1)&gt;</listing>