securityMB

CSS Scrollbar attack

Image we have the following code:

<script>
var TOKEN="abcdef";
</script>

securityMB

Yesterday I posted a little quiz on Twitter about HTML parsing.

The question was: what element is going to be the parent of the final <s> in the following snippet of HTML:

<div><table><svg><foreignObject><select><table><s>

The final answers are: