Author Archives: Nokosi Pow

Currently assessing an application, I found out that it is possible to submit an SVG fill containing Javascript (the app is also vulnerable to XXE). I wondered if there was a method to prevent those vulnerabilities and secure… Continue reading Preventing XSS in SVG→