>Home>Labs>New labs>Creators>Ranking>Learn>Business>Pricing
ES
Sign inCreate account
Home·Academy·Topics·csp bypass
Topic · 2 articles

csp bypass

Bypassing Content-Security-Policy with JSONP, base-uri, AngularJS gadgets, dangling markup.

Quick answer

What is csp bypass?

Bypassing Content-Security-Policy with JSONP, base-uri, AngularJS gadgets, dangling markup.

Articles

2

Beginner

0

Intermediate

1

Advanced

1

Intermediate level

1
Free

Stored XSS via SVG with href javascript: in chat — reclassification of Self-XSS

An SVG payload uploaded as an attachment. Filter bypassed. Rendered inline in the main context. Any chat participant is exposed on click.

11 minxssstored-xsssvg
Read article

Advanced level

1
Free

CSP Bypass — JSONP, base-uri, AngularJS gadgets, dangling markup

Content-Security-Policy broken with strict-dynamic + JSONP, missing base-uri, AngularJS sandbox escapes, JSON hijacking. How to escalate XSS when the CSP theoretically blocks it.

13 mincsp-bypassxssbrowser-security
Read article

Practice csp bypass with real labs

Apply the techniques in safe environments based on real bug bounty reports.

See csp bypass labs
All topicsAcademy
hunters training
712

hunters training

labs from real reports
55

labs from real reports

completions
1,206

completions

in bounties practiced
$213,970

in bounties practiced

46 flags captured this week·Real reports from HackerOne · Bugcrowd · Intigriti·No commitment·Free Academy
BBLabs · bug bounty training

Stop reading about bugs and start hunting them

Create your free account and practice on labs based on real reports that paid out thousands of euros. The Academy is free forever.

Create free accountSee the labs

No card · free Academy · cancel anytime