Scalable Vector Grief
// AI summary
PortSwigger Research bypassed six of eight popular SVG sanitizers and found that a response header can make Firefox run JavaScript even when the XML body is harmless.
// from the source
I tested eight popular SVG sanitizers and bypassed six of them. In this post, I'll show you how a response header can run JavaScript in Firefox even when the response body is completely harmless XML.