portswigger.net/research· Jun 11, 2024

onwebkitplaybacktargetavailabilitychanged?! New exotic events in the XSS cheat sheet

Open Original Article ↗
The power of our XSS cheat sheet is we get fantastic contributions from the web security community and this update is no exception. We had valuable contributions from Mozilla to remove events that no
🎯 Vulnerability: Cross-Site Scripting (XSS)
💡 Defense Fix: Enforce Context-Aware Output Encoding, strict Content-Security-Policy (CSP), and HttpOnly cookie flags.