notes

content-type and filename extensions for xss

2018-03-05

real content-type

chromium && firefox

only firefox mozilla

tricks with comma or round bracket

file extensions

chromium && firefox

only firefox