RuhrSec 2018: "Don't trust the DOM: Breaking XSS mitigations via Script Gadgets", Sebastian Lekies
▶RuhrSec 2018: "Don't trust the DOM: Breaking XSS mitigations via Script Gadgets", Sebastian Lekies — a 2018 RuhrSec 2018: Day 1 security conference talk on web-appsec (43:04 min). Watch the full video, indexed free on the Breach Arc Archive.
▶ Watch video on YouTube