Home / Web Security / XSS > DON'T TRUST THE DOM: BYPASSING XSS MITIGATIONS VIA SCRIPT GADGETS XSS > DON'T TRUST THE DOM: BYPASSING XSS MITIGATIONS VIA SCRIPT GADGETS Written by Sebastian Lekies, Krzysztof Kotowicz, and Eduardo Vela. Package GitHub Back to Web Security