How I found DOM-Based XSS on Microsoft MSRC and How They Fixed it

How I found DOM-Based XSS on Microsoft MSRC and How they fixed it

Microsoft MSRC ฺBlog site: Dom-based XSS Vulnerability

Table of Contents

• Introduction
• Background of DOM-Based XSS
• Finding and Analyzing the Vulnerable Code
• Reporting the Vulnerability to Microsoft
• How MSRC Team Fixing the Vulnerability
• Disclosure Timelines

Introduction

In this blog post, I am excited to share my experience of discovering a DOM-Based XSS vulnerability on the Microsoft Security Response Center (MSRC) website, and how the Microsoft Security Team …

bug-bounty-writeup cross site scripting dom microsoft msrc vulnerability research xss xss-vulnerability