Collected research
Firefox uXSS and CSS XSS - Abdulrahman Al-Qabandi
Firefox uXSS and CSS XSS
A Firefox regression let a javascript URI run from a CSS background-image through the View background image context-menu item. Because an open context menu still acts on whatever page the window has navigated to, calling history.back() from oncontextmenu makes the script run in a cross-origin page, giving universal XSS that also sidesteps CSP and NoScript.
Record
- Document
- Firefox uXSS and CSS XSS
- Researcher
- Abdulrahman Al-Qabandi
- Published by
- leucosite.com
- Topic
- XSS
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Abdulrahman Al-Qabandi, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .