Parse Me, Baby, One More Time: Bypassing HTML Sanitizer via Parsing Differentials.

David Klein, Martin Johns

Browse the full SP paper archive.