Preliminary research
Scalable Vector Grief
AI-collected research leads through 3 November 2026, including a November–October–September missed-article review and a targeted multilingual search alongside earlier community-source sweeps. Unranked, incomplete, not community-vetted, and subject to change.
SVG sanitization can be followed by transformations or imports that recreate executable markup. The article demonstrates self-contained data-XSLT, Firefox Link-header data-XSLT and Safari use/import contexts; earlier two-file XSLT XSS does not establish the same capability under these constraints.
Record
- Researcher
- Gareth Heyes
- Published by
- PortSwigger
- Date
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Gareth Heyes, first published at the original source. Preserved copies are kept so the citation survives its host.