Scalable Vector Grief
I tested eight popular SVG sanitizers and bypassed six of them. In this post, I'll show you how a response header can run JavaScript in Firefox even when the response body is completely harmless XML.
原文：https://www.a8q9.cn/en/article/scalable-vector-grief-42d220.html