3 ms·Parse me, baby, one more time: bypassing HTML sanitizers via parsing differentia [pdf]2 points by fanf2 2y ago