Tag

dom-clobbering

Safeguard articles tagged "dom-clobbering" — guides, analysis, and best practices for software supply chain and application security.

1 article

Application Security

DOM clobbering: the XSS attack that never runs a script tag

DOM clobbering lets attackers hijack JavaScript logic using pure HTML — no <script> tag required — and it just bypassed DOMPurify's own sanitizer in 2026.

Jul 8, 20266 min read