update php parser2

Yaniv-git · Yaniv-git · commit 0b3d12950e72 · 2024-03-26T09:46:23.000+01:00
diff --git a/source/_posts/PHP HTML parser differential due to libxml2 lack of HTML5 support.md b/source/_posts/PHP HTML parser differential due to libxml2 lack of HTML5 support.md
@@ -62,7 +62,12 @@ Parsing the following string will render an xss tag in the browser but not in PH
 * `<!DOCTYPE HTML SYSTEM "><xss>">`
 
 #### 5. element name starting with underscrool
-
+According to the [XML specification](https://www.w3schools.com/xml/xml_elements.asp#:~:text=can%20have%20attributes.-,XML%20Naming%20Rules,-XML%20elements%20must) `Element names must start with a letter or underscore`, unlike [HTML](https://html.spec.whatwg.org/#syntax-tag-name) where tags must start with ASCII alphanumerics.
+```
+Input: <p><_test>/<p>
+HTML output: <p>&lt;_test/&gt;/<p>
+XML output: <p><_test/>/<p>
+```
 
 ### Impact
 Sanitizers using the built-in PHP parser are inherently vulnerable to bypass due to wrong parsing.
