Bypassing CSP via DOM clobbering

You might have found HTML injection, but unfortunately identified that the site is protected with CSP. All is not lost, it might be possible to bypass CSP using DOM clobbering, which you can now detec

bypass bypassing csp dom html html injection injection lost