A tweet by @BRuteLogic highlights a XSS bypass payload that can be used in URL context. The payload is JavaScript:"<Svg/OnLoad=alert%25%0A26lpar;1)>". This payload can potentially bypass various WAFs. It is important for security professionals to be aware of such payloads and ensure proper protection measures are in place to mitigate XSS vulnerabilities in web applications. #xss #cybersecurity #BugBounty #pentest #Coding