Gareth Heyes explores Safari fuzzing behavior
AI summary
I was pondering how to fuzz this interesting Safari behavior. First, the code checks whether the marker is consumed and only increments the counter if it is not consumed. The second piece of code wraps the tag in a select to see if the code executes. If the tag is consumed and neutralized, the counter is 1.
Full text · Original
I thought how can fuzz this interesting Safari behaviour. First the code checks markup is consumed by only incrementing the counter if it is not.The second snippet then wraps the tag in a select and see if the code executes. The counter is 1 if the tag consumes and is neutralized