Collected research
Forcing Firefox to Execute XSS Payloads during 302 Redirects
An open redirect that reflects a parameter into the Location header allows CRLF header injection and body injection, but browsers normally ignore the body of a 302 response. Setting the Location to a ws or wss URI (Firefox), an empty value (Chrome), or a resource URI forces the browser to render the injected body, turning the redirect into reflected XSS.
Record
- Published by
- gremwell.com
- Topic
- XSS
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of gremwell.com, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .