Collected research

Code Vulnerabilities Put Proton Mails at Risk

Paul Gerste · Sonar · 4 September 2023

Proton Mail renamed sanitized svg elements to proton-svg after DOMPurify ran, moving the subtree from SVG to HTML parsing rules so a closing style sequence hidden in an attribute re-parsed into a live img onerror handler.

Record

Researcher

Paul Gerste

Published by

Sonar

Date

4 September 2023

Topic

Other

In the archive

• Collected in the 2023 research round

Related sources

• Code Vulnerabilities Put Skiff Emails at Risk
• Black Hat Asia session
• Talk recording

Tags

• mutation-xss
• sanitizer-bypass
• parser-differential
• xss
• css
• side-channel
• info-leak
• csp
• iframe
• email
• owasp-a03-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of Paul Gerste, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.