Abstract

This talk details a new technique which exploits the logic of html parsers to produce client-side attack vectors against website chat and messenger functions. This area of application testing is mature, having developed over the last ten years and includes established security standards. As a result, new attack techniques are hard to come by.