UXSS Using Domainless URLs - Easy version
[STEP 1] Click to change the top location to a domainless URL.
Patched! Also, with Windows Creators Update we can't even run flash automatically!
Note: this PoC does not need interaction at all, but we are going to click on every step to understand what's happening behind the scenes.
Want to learn more? Broken Browser
Questions? Ping me at @magicmac2000