Out of curiosity, I fed the attacks to the Go bluemonday library https://github.... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

yencabulator on Oct 8, 2020 | parent | context | favorite | on: DOMPurify bypass: XSS via HTML namespace confusion

Out of curiosity, I fed the attacks to the Go bluemonday library https://github.com/microcosm-cc/bluemonday

It seemed to have no issues whatsoever (click Run): https://play.golang.org/p/oBYXo9MDusr https://play.golang.org/p/KzD1Ug-KKiB

Join us for AI Startup School this June 16-17 in San Francisco!
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact