Top 10 winner

Google Search XSS

How did Masato find the Google Search XSS?

LiveOverflow · YouTube · 7 April 2019

Explains how a Google Search XSS was found: fuzzing pairs of HTML tags through different parsing paths and diffing what a sandboxed iframe, DOMParser and createHTMLDocument produce, which exposes noscript and noembed parsing differently when scripting is disabled. The resulting parser differential mutates sanitized markup into script execution and bypassed two sanitizers.

Record

Document

How did Masato find the Google Search XSS?

Researcher

LiveOverflow

Published by

YouTube

Date

7 April 2019

Format

Recording

Topic

XSS

In the archive

• Ranked #5 in the 2019 Top 10 Web Hacking Techniques

Related sources

• XSS on Google Search - Sanitizing HTML in The Client?

Tags

• mutation-xss
• parser-differential
• sanitizer-bypass
• xss
• fuzzing
• dom
• iframe
• javascript
• case-study
• owasp-a03-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of LiveOverflow, first published at the original source. Preserved copies are kept so the citation survives its host.