Security Research

CVE-2023-4357 Chrome LibXSLT XEE: The XML External Entity Surface Browsers Forgot

Thinking 2023-08-22 6 min read Research Dossier
#Vulnerability Analysis#Code Audit#Web Security
Copper-orange XSLT engine inside a browser reading a local file

WebKit-based browsers like Chrome ship LibXSLT as their default XSL engine, but its document() function still allows loading external entities — so file:// resources outside the sandbox quietly get read. This is a browser-side XEE writeup built around a consistency gap.

Unlock to view this content.