XSS in yarr
Summary
XSS vulnerability analysis of yarr RSS reader through its content sanitization. The write-up explains how iframe src handling and URL parsing can bypass sanitization whitelists, enabling arbitrary script execution, and discusses potential impact and mitigations.