Skip to content

Commit a5a8a48

Browse files
committed
update php parser
1 parent 5eeee98 commit a5a8a48

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

source/_posts/PHP HTML parser differential due to libxml2 lack of HTML5 support.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -61,6 +61,9 @@ Parsing the following string will render an xss tag in the browser but not in PH
6161
* `<!DOCTYPE HTML PUBLIC "-//W3C//DTDHTML4.01//EN" "><xss>">`
6262
* `<!DOCTYPE HTML SYSTEM "><xss>">`
6363

64+
#### 5. element name starting with underscrool
65+
66+
6467
### Impact
6568
Sanitizers using the built-in PHP parser are inherently vulnerable to bypass due to wrong parsing.
6669

0 commit comments

Comments
 (0)