Generic HTML Sanitizer Bypass Investigation
Added 2023-07-03 15:19:57 +0000 UTCI stumbled over a weird HTML behavior on Twitter and started to investigate it. Did I just stumble over a generic HTML Sanitizer bypass?
- The Tweet: https://twitter.com/MRCodedBrain/status/1662701541680136195
- Google XSS: https://www.youtube.com/watch?v=lG7U3fuNw3A
- HTML Spec: https://html.spec.whatwg.org/multipage/parsing.html#parse-error-invalid-first-character-of-tag-name
