Submitted by Franz Sedlmaier, adding extraneous open angle brackets can defeat certain forms of XSS filters by looking for matching pairs, instead of parsing using string comparisons after de-obfuscation.

This entry was posted on Thursday, January 1st, 1970 at 12:00 am and is filed under XSS, Webappsec. You can leave a response as well.