Unicode Domains are bad and you should feel bad for supporting them

vgrsec.comsite

from

Web Security

added

2026-10-10

likes

0

similar

1. ▲

   Exploiting XXE with local DTD files mohemiv.com

   site link ↗
   
2. ▲

   Evil XML with two encodings mohemiv.com

   site link ↗
   
3. ▲

   Some Problems Of URLs noncombatant.org

   site link ↗
   site
4. ▲

   DON'T TRUST THE DOM: BYPASSING XSS MITIGATIONS VIA SCRIPT GADGETS blackhat.com

   site link ↗
   site
5. ▲

   Phishing with Unicode Domains xudongz.com

   site link ↗
   site
6. ▲

   Evading CSP with DOM-based dangling markup portswigger.net

   site link ↗
   

Web Security › Tricks > URL: “Written by VRGSEC.”