Collected research
Provoking browser quirks with behavioural fuzzing
Behavioural fuzzing drives every Unicode code point into a chosen HTML or JavaScript position and diffs the parse result to expose browser quirks. In Firefox it shows a newline closing an HTML comment after an incomplete terminator, a null byte opening one, and certain code points being ignored by the JavaScript parser, each yielding a new filter-bypass XSS vector.
Record
- Researcher
- Gareth Heyes
- Published by
- PortSwigger Research
- Date
- Topic
- Browser
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Gareth Heyes, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .