4 ms·
Could this be used in a XSS attack where there are very limited characters to use after the src= tag, where it would resolve to a valid domain with more charact
by A_No_Name_Mouse 7y ago
Could this be used in a XSS attack where there are very limited characters to use after the src= tag, where it would resolve to a valid domain with more characters?
- lol768 7y agoPotentially, depending on how the character counting is done (if it counts grapheme clusters instead of bytes I guess?)