Reconstructing JavaScript from HTML Tag Names: An XSS and WAF Blocklist Evasion Technique

Dev.to•Wed, Aug 26, 2026, 02:14 PM•2 min read

1. Basic Information Article Title : What's in a tag name? JavaScript, apparently Published By : PortSwigger Research Publication Date : 2026-08-25 14:24 UTC Original Source : PortSwigger Research Related Sources : None Related Malware, Attack Groups, CVEs, Products : XSS, Web Browsers, WAF, HT...

Source: [Dev.to](https://dev.to/anoymask/reconstructing-javascript-from-html-tag-names-an-xss-and-waf-blocklist-evasion-technique-10in)

📰 Read Full Story

This is an aggregated headline summary. For the complete report, visit the original publisher.

Continue Reading at Dev.to ↗

#tech #html #event #browser #tag #javascript #dom #execution #names

More Headlines

TechnologyHacker News• 4m ago

Instinct.co Raises $350M

1 points, 0 comments on Hacker News

TechnologyHacker News• 9m ago

Panix, the oldest commercial Internet provider in New York, started in 1989

1 points, 0 comments on Hacker News

TechnologyDev.to• 11m ago

FutureBuilder and StreamBuilder as Anti-Patterns: Why Your Async Boundary Should Be Far Away From Your Views

Why Raw Asynchrony Inside the Presentation Layer Breaks Separation of Concerns, User Experience, and Testability Every Flutter developer remembers the magic of their first FutureBuilder . You paste an HTTP request directly into a FutureBuilder inside your widget's build() method, configure a Cir...

TechnologyHacker News• 13m ago

Veri, a non-custodial ZK identity vault on Algorand

1 points, 0 comments on Hacker News

TechnologyHacker News• 14m ago

AWS Strands Agents Tools Received Four CVEs in 23 Days

1 points, 0 comments on Hacker News

TechnologyHacker News• 16m ago

Show HN: Agent-hop – a Rust TUI that hops a live Claude Code chat into Codex

Hi HN! Agent-hop is a TUI which allows you to use multiple coding agents and lets you hop between agents mid-chat. So, if you are using Claude Code and you do not want to lose context in another agent, you could just hop to another agent (Codex, Pi, Grok Build, OpenCode).