Researcher bypasses six of eight popular SVG sanitizers
Namespace tricks, animated JavaScript URLs and XSLT data URLs execute script, including via a Firefox response header.
52
Product
sanitize-svg
- Mentions · 7d1
- Mentions · 30d1
- All mentions1
- First seenOct 28, 2026
- Last mentioned2d ago
Timeline
1 articles · newest firstAppears with
- DOMPurifyproduct · 1
- PortSwiggerorganization · 1
- svg-sanitizerproduct · 1
- safe-svgproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.