Anant Shrivastava posted in IronWASP.

View original on Facebook →

Hey Everyone please bare with me on this question this might be repeated earlier and if so please point me to correct thread.

I keep hearing this term per context XSS filter now a days. Can anyone point me in correct direction where an attempt is made to list out all possible context in this case.

Some i can understand are direct output

on html body,

on tag parameter’s value

inside javascript

what other context’s i have missed.