Drew hoodoer

💻

Flailing arms, pounding on laptop.

Hacking things, coding things. Principal Security Consultant at TrustedSec

BlackFan / Bootstrap_XSS.md

Last active October 21, 2025 08:24

Bootstrap XSS Collection

CVE-2019-8331

Bootstrap < 3.4.1 || < 4.3.1

✔️ CSP strict-dynamic bypass

➖ Requires user interaction

➖ Requires $('[data-toggle="tooltip"]').tooltip();