Collected research

My Sweet Innocence Exposed - Eleven Reasons why we will all miss you, e

Marcus Niemietz (HackPra) · YouTube · 21 July 2017

A talk cataloguing Internet Explorer features that were security disasters by design. Legacy document modes, inherited by any page an attacker iframes, let old injections be replayed against a modern browser; proprietary markup such as the behavior property plus CSS magic bytes pulls script out of uploaded files; and exotic charsets like CP 875 encode angle brackets as letters that server-side filters pass through.

Record

Researcher

Marcus Niemietz (HackPra)

Published by

YouTube

Date

21 July 2017

Format

Recording

Topic

Other

In the archive

• Collected in the 2016–17 research round

Related sources

• Mario Heiderich: "My Sweet Innocence Exposed - Eleven Reasons why we will all miss you, 'e'"

Tags

• xss
• filter-bypass
• css-injection
• charset
• encoding
• iframe
• sanitizer-bypass
• mime
• css
• owasp-a02-2021
• owasp-a03-2021
• owasp-a05-2021

This page is the archive's own catalogue record. The research is the work of Marcus Niemietz (HackPra), first published at the original source. Preserved copies are kept so the citation survives its host.