Redefining Impossible: XSS without arbitrary JavaScript

We recently updated our impossible XSS labs series with a new challenge. For this scenario your injection occurs within a single quoted JavaScript string and you can only use the charset a-zA-Z0-9’+.`… Read more

Read full article

Similar

DPP: Deep Persistent Proxy Objects for JavaScript

Deep Persistent Proxy Objects for JavaScript. Contribute to robtweed/DPP development by creating an account on GitHub. (more…)

JavaScript Visualized: The JavaScript Engine

JavaScript is cool (don't @ me), but how can a machine actually understand the code you've written? As JavaScript devs, we usually don't have to deal with compilers ourselves. However, it's definitely good to know the basics of the JavaScript engine and s... (more…)