3 ms·
I don't get it then. Since browser already turns it into ascii format before resolving, how would it work in XSS for server-side max length limitation as he me
by fireattack 6y ago
I don't get it then.
Since browser already turns it into ascii format before resolving, how would it work in XSS for server-side max length limitation as he mentioned in his other article, "Minimum Viable XSS" [1]?
[1] https://shkspr.mobi/blog/2016/03/minimum-viable-xss/ https://shkspr.mobi/blog/2016/03/minimum-viable-xss/
- jrochkind1 6y agoYeah, I don't really get that either; I don't understand the value of these denormalizing domain names to XSS.