Skip to content
xsspayloads

Posts tagged: #testing

← Back to all posts
Designing an XSS playground that does not lie to the tester
A sandboxed XSS playground is useful only if it makes isolation, parser context, and execution limits explicit.
xssplaygroundsandboxtesting
XSS encoding pipelines: order matters more than people admit
URL encoding, HTML entities, Base64, and JavaScript escaping change meaning depending on order. This article explains the operational mistakes.
xssencodingpayloadstesting