uxss - Robuta Search

https://magicmac.github.io/blog/2007-01-24-uxss-using-just-htmlfile/ UXSS Using Just htmlFile uxss using https://magicmac.github.io/blog/2011-05-19-pseudo-uxss-external-returnvalue-shared-across-domains/ Pseudo-UXSS: external.returnValue Shared Across Domains in Modal Dialogs pseudo uxss external shared across https://magicmac.github.io/blog/2013-03-08-uxss-iframe-redirect-location-javascript/ UXSS via iFrame Redirect and location javascript Protocol uxss via iframe redirect location https://magicmac.github.io/blog/2017-03-20-uxss-ie-domainless-world/ SOP bypass / UXSS - More Adventures in a Domainless World (IE) more adventures sop bypass uxss world https://magicmac.github.io/blog/2011-07-22-uxss-vbscript-error-bubbles-up-get-constructor/ UXSS: VBScript Error Bubbles Up to Expose Cross-Origin Constructor up to cross origin uxss vbscript error https://magicmac.github.io/blog/2014-05-13-uxss-insert-iframe-location-javascript/ UXSS: Injected iFrame + Server Redirect + javascript: Location uxss injected iframe server redirect https://magicmac.github.io/blog/2007-04-19-uxss-xaml-frameelement/ UXSS - XAML frameElement uxss xaml https://magicmac.github.io/blog/2012-07-31-ie10-uxss-cache-document-all-new-thread/ IE10 UXSS via Cached document.all and New Thread uxss via cached document new https://magicmac.github.io/blog/2012-06-19-ie10-uxss-new-window-pushstate-designmode-back/ IE10 UXSS: New Window pushState + designMode + Back Button Gives Cross-Origin DOM Access https://magicmac.github.io/blog/2010-12-01-ie9-uxss-location-prototype-intercept-legit-methods/ IE9 UXSS: Location.prototype.replace Intercepts Cross-Origin Frame-Breaking cross origin uxss location prototype replace https://magicmac.github.io/blog/2013-11-12-uxss-ie11-about-blank-full-access/ UXSS on IE11: Domainless about:blank Full Cross-Origin Access about blank cross origin uxss full access https://magicmac.github.io/blog/2007-02-01-uxss-pseudo-xdomain-scriptlet-component/ UXSS - Pseudo Cross-Domain Scriptlet Component cross domain uxss pseudo component https://magicmac.github.io/blog/2010-09-01-ie9-uxss-non-html-content-inline-event-handler/ IE9 UXSS: Reading Non-HTML IFrame Content from an Inline Event Handler https://ultrafast.stanford.edu/news/registration-open-ultrafast-x-ray-summer-school-uxss-2025 Registration open: Ultrafast X-ray Summer School - UXSS-2025 | Stanford PULSE Institute registration open x ray summer school https://magicmac.github.io/blog/2013-03-19-uxss-iframe-getselection/ UXSS via iFrame getSelection After Redirect uxss via iframe redirect https://magicmac.github.io/blog/2010-06-03-ie9-uxss-htmlfile-reload-twice-redirect/ IE9 UXSS: htmlFile ActiveX Object Double-Reload Redirect uxss activex object double reload https://magicmac.github.io/blog/2007-04-19-uxss-xml-feeds-frameelement/ UXSS - XML Feeds frameElement xml feeds uxss https://magicmac.github.io/blog/2007-03-31-ie7-uxss-read-local-files-urls-xml-through-feeds/ IE7 UXSS - Read Local Files and URLs Through Feeds read local uxss files urls feeds https://magicmac.github.io/blog/2007-04-27-uxss-cached-contentwindow-frameelement/ UXSS - Cached contentWindow frameElement uxss cached https://magicmac.github.io/blog/2010-02-04-uxss-override-trident-method-redirect/ UXSS: Overriding a Trident Method on an IFrame Before Redirect uxss overriding trident method iframe https://magicmac.github.io/blog/2012-02-15-ie10-uxss-xmlhttp-designmode-redirect/ IE10 UXSS: XMLHTTP in Redirected iframe with designMode Accesses Cross-Origin Content https://magicmac.github.io/blog/2013-02-05-ie10-uxss-sandbox-headers-paradox/ IE10 UXSS: Sandbox Headers Paradox uxss sandbox headers paradox https://magicmac.github.io/blog/2010-09-02-ie9-uxss-defineproperty-intercept-legit-methods/ IE9 UXSS: Object.defineProperty Intercepts Cross-Origin Navigation cross origin uxss object defineproperty intercepts https://magicmac.github.io/blog/2012-02-13-ie10-uxss-createpopup-docwrite-and-redirect/ IE10 UXSS: createPopup document.write in Redirected iframe Changes Popup Origin write in uxss document https://magicmac.github.io/blog/2007-05-11-uxss-another-variation-cachedwindowopen-setcapture/ UXSS Variation: Cached window.open with setCapture Across All Pages window open uxss variation cached across https://magicmac.github.io/blog/2006-02-17-uxss-object-createpopup-iframe/ UXSS via OBJECT + createPopup + IFRAME (MSRC 6417) uxss via object iframe msrc https://magicmac.github.io/blog/2010-09-03-uxss-cached-childnodes-redirect/ UXSS: Cached childNodes Collection Survives Cross-Origin Redirect cross origin uxss cached collection redirect https://magicmac.github.io/blog/2007-02-21-uxss-navigator-shared-properties-and-methods/ UXSS - Navigator Shared Properties and Methods uxss navigator shared properties methods https://magicmac.github.io/blog/2010-07-28-ie9-uxss-self-window-frames-reference/ IE9 UXSS: Accessing Cross-Origin Content via window.self cross origin uxss accessing content via https://magicmac.github.io/blog/2013-08-01-f12-uxss-dom-explorer-select-element/ F12 DevTools DOM Explorer UXSS via Select Element devtools dom explorer uxss via https://magicmac.github.io/blog/2010-08-26-ie9-uxss-cached-location-replace-constructor/ IE9 UXSS: Getting Function Constructor from a Cached location.replace uxss getting function constructor cached https://magicmac.github.io/blog/2007-10-04-uxss-ie55-documenturl-about/ UXSS (SOP Bypass Attempt): IE 5.5 document.URL Set to about: Script https://magicmac.github.io/blog/2012-01-09-uxss-caching-external-from-modal-returnvalue/ UXSS: Caching Modal External Object and Sharing document via returnValue uxss caching modal external object https://magicmac.github.io/blog/2007-02-01-uxss-using-excel-control/ UXSS Using Excel Control uxss using excel control https://magicmac.github.io/blog/2007-10-24-uxss-variation-simplification-woobr-977211/ UXSS Simplification (WOOBR 977211): Cached SWF Document Without Reload uxss simplification cached swf document https://magicmac.github.io/browser-workshop/uxss/ UXSS / SOP Bypass - Browser Workshop Fun with browser vulnerabilities uxss sop bypass browser workshop https://magicmac.github.io/blog/2011-12-26-ie10-uxss-cache-window-from-htc-in-math-object/ IE10 UXSS: Caching Window Reference via HTC in Math Object Survives Redirect https://magicmac.github.io/blog/2016-12-13-uxss-edge-domainless-world/ SOP bypass / UXSS - Adventures in a Domainless World (Edge) in a sop bypass uxss adventures https://magicmac.github.io/blog/2010-11-03-drag-drop-uxss-not-finished/ Drag-Drop UXSS Attempt (Unfinished) drag drop uxss attempt unfinished