https://blog.mingon.dev/tags/csti/Recent content in CSTI on 보안 연구 노트Hugo -- gohugo.ioko-KRWed, 03 Jun 2026 15:00:00 +0900https://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---dom-xss-in-angularjs-expression-with-angle-brackets-and-double-quotes-html-encoded/Wed, 03 Jun 2026 15:00:00 +0900https://blog.mingon.dev/write-up/portswigger/xss/write-up-portswigger---dom-xss-in-angularjs-expression-with-angle-brackets-and-double-quotes-html-encoded/HTML 인코딩된 검색어가 ng-app 범위에 삽입되는 환경에서 AngularJS 표현식과 Function 생성자로 alert를 실행하는 DOM XSS 풀이