22Şub
Can an attacker force a browser to use quirks mode to render a page?
During a pentest, I’ve found a potential vulnerability on a web page, but it can only be exploited in quirks mode.
The page starts with <!doctype html>, which triggers standards mode so at first glance, it isn’t exploitable.
Are th…
