Firefox XBL-JS Loader v1.0
Martin Paul Eve · 2007
Today I wrote a simple tool to illustrate the binding of a Javascript document to a page using Firefox's XBL support (-moz-binding) in an XSS context. The process works as follows: Inject attributes as follows (different encodings may be necessary): . Browser loads XBL document.