Issues

• Snow can be bypassed using the Response.prototype.blob function

  LavaMoat/snow#159 · Filter by author matanber opened on Apr 29, 2024
  2

• Snow can be bypassed by creating a Blob URI inside a worker

  LavaMoat/snow#158 · Filter by author matanber opened on Apr 29, 2024
  7

• Snow can be bypassed with location.replace

  LavaMoat/snow#154 · Filter by author hackvertor opened on Oct 16, 2023
  3

• Snow can be bypassed with forms and buttons formAction

  LavaMoat/snow#153 · Filter by author hackvertor opened on Oct 16, 2023
  1

• Snow can be bypassed with nested cross-origin frames

  LavaMoat/snow#152 · Filter by author deryilz opened on Oct 16, 2023
  2

• Snow can be bypassed with meta and the HTML sanitizer

  LavaMoat/snow#151 · Filter by author hackvertor opened on Oct 16, 2023
  1

• Snow can be bypassed with native Prototype Pollution

  LavaMoat/snow#149 · Filter by author terjanq opened on Oct 2, 2023
  1

• Snow can by bypassed with polluting NodeList.prototype.length

  LavaMoat/snow#148 · Filter by author terjanq opened on Oct 2, 2023
  2

• Snow can be bypassed with declarative shadow DOM passed as object instead of string

  LavaMoat/snow#147 · Filter by author avlidienbrunn opened on Oct 2, 2023
  1

• customElements extends check can be bypassed using a non-string

  LavaMoat/snow#145 · Filter by author avlidienbrunn opened on Oct 1, 2023
  3

• Snow can be bypassed with opener.alert()

  LavaMoat/snow#144 · Filter by author terjanq opened on Sep 30, 2023
  1

• Blob validation in Snow can be bypassed with native object copy

  LavaMoat/snow#143 · Filter by author terjanq opened on Sep 30, 2023
  2

• Snow can by bypassed with race condition

  LavaMoat/snow#142 · Filter by author terjanq opened on Sep 30, 2023
  1

• Snow can be bypassed with inline script

  LavaMoat/snow#141 · Filter by author terjanq opened on Sep 30, 2023
  4

• Snow can be bypassed with iframes and srcdoc

  LavaMoat/snow#138 · Filter by author hackvertor opened on Sep 29, 2023
  1

• Bypass via nested same-origin iframe

  LavaMoat/snow#136 · Filter by author NDevTK opened on Aug 9, 2023
  4

• Support "unsafes" - unsafely configure Snow to allow non-secure operations

  enhancement
  LavaMoat/snow#110 · Filter by author weizman opened on Jun 22, 2023
  3