Search results

Snow can be bypassed using the Response.prototype.blob function

Status: Open.

#159 In lavamoat/snow;

· matanber opened on Apr 29, 2024

Snow can be bypassed by creating a Blob URI inside a worker

Status: Open.

#158 In lavamoat/snow;

· matanber opened on Apr 29, 2024

Snow can be bypassed with location.replace

Status: Open.

#154 In lavamoat/snow;

· hackvertor opened on Oct 16, 2023

Snow can be bypassed with forms and buttons formAction

Status: Open.

#153 In lavamoat/snow;

· hackvertor opened on Oct 16, 2023

Snow can be bypassed with nested cross-origin frames

Status: Open.

#152 In lavamoat/snow;

· deryilz opened on Oct 16, 2023

Snow can be bypassed with meta and the HTML sanitizer

Status: Open.

#151 In lavamoat/snow;

· hackvertor opened on Oct 16, 2023

Snow can be bypassed with native Prototype Pollution

Status: Open.

#149 In lavamoat/snow;

· terjanq opened on Oct 2, 2023

Snow can by bypassed with polluting NodeList.prototype.length

Status: Open.

#148 In lavamoat/snow;

· terjanq opened on Oct 2, 2023

Snow can be bypassed with declarative shadow DOM passed as object instead of string

Status: Open.

#147 In lavamoat/snow;

· avlidienbrunn opened on Oct 2, 2023

customElements extends check can be bypassed using a non-string

Status: Open.

#145 In lavamoat/snow;

· avlidienbrunn opened on Oct 1, 2023

Snow can be bypassed with opener.alert()

Status: Open.

#144 In lavamoat/snow;

· terjanq opened on Sep 30, 2023

Blob validation in Snow can be bypassed with native object copy

Status: Open.

#143 In lavamoat/snow;

· terjanq opened on Sep 30, 2023