Collected research

XSS-FP: Browser Fingerprinting using HTML Parser Quirks

[1211.4812] XSS-FP: Browser Fingerprinting using HTML Parser Quirks

Erwan Abgrall, Yves Le Traon, Martin Monperrus, Sylvain Gombault, Mario Heiderich and Alain Ribault · arXiv.org

Proposes fingerprinting a browser by the quirks of its HTML parser, probed through XSS injection points. Feeding malformed markup and observing how each engine repairs it identifies the exact browser type and version with 71% accuracy, and only six tests suffice to place a browser in its family.

Record

Document

[1211.4812] XSS-FP: Browser Fingerprinting using HTML Parser Quirks

Researcher

Erwan Abgrall, Yves Le Traon, Martin Monperrus, Sylvain Gombault, Mario Heiderich and Alain Ribault

Published by

arXiv.org

Topic

XSS

In the archive

• Collected in the 2012 research round

Tags

• parser-differential
• xss
• info-leak
• detection
• dom
• owasp-a03-2021
• owasp-a09-2021

This page is the archive's own catalogue record. The research is the work of Erwan Abgrall, Yves Le Traon, Martin Monperrus, Sylvain Gombault, Mario Heiderich and Alain Ribault, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 19 August 2026.