What's in a tag name? JavaScript, apparently
Summary
PortSwigger's research demonstrates that HTML tag names can be manipulated to execute JavaScript payloads via XSS vectors. The article details how browser quirks and DOM properties like localName, part, and classList can bypass blocklists and WAFs, with multiple payload examples and practical implications for secure web development and testing.