XSS WAF Bypass – (event handlers are filtered)
?param=onxxx=x ?? ??403 Forbidden
?param===onxxx=x ?? ?200 OK
#bugbountytips #waf