Category | XS-Leaks Wiki

XS-Leaks Wiki

Attacks
- XS-Search
- Window References
- CSS Tricks
- Error Events
- Frame Counting
- Navigations
- Cache Probing
- Element leaks
- ID Attribute
- postMessage Broadcasts
- Browser Features
  - CORB Leaks
  - CORP Leaks
- Timing Attacks
- Experiments
- CSS Injection
- Historical
Defense Mechanisms
Contributions

Category

Abuse
- Downloads 2
- Window References 1
- Browser Feature 2
- Browser Limits 1
- Connection Pool 1
- Content-Type 3
- CSP Violations 1
- CSS 2
- CSS Injections 1
- Error Events 3
- Event Loop 1
- Focus 2
- History 1
- Iframes 9
- Nosniff 2
- Onblur 2
- PostMessage 1
- Redirects 1
- Regex Injections 1
- Service Workers 1
- Site Isolation 1
- Status Code 2
- TypeMustMatch 1
- Window.open 2
- Window.performance 1
- Window.stop 1
- AbortController 1
- Cache 1
- HTMLElement 1
Category
- Defense 15
- Historical 3
- Attack 18
- Attack Principle 1
- Experiments 2
- Instrument 1
Defenses
- Deprecation 2
- COOP 6
- Fetch Metadata 12
- SameSite Cookies 15
- Application Fix 1
- Browser Fix 1
- CORB 1
- Document Policies 2
- Framing Protections 6
- Subresource Protections 1
- Vary: Sec-Fetch-Site 1

Defense

March 13, 2026

Historical

April 23, 2024

Attack

October 8, 2020

Attack Principle

October 1, 2020

Experiments

October 1, 2020

Instrument

October 1, 2020

Abuse
- Downloads 2
- Window References 1
- Browser Feature 2
- Browser Limits 1
- Connection Pool 1
- Content-Type 3
- CSP Violations 1
- CSS 2
- CSS Injections 1
- Error Events 3
- Event Loop 1
- Focus 2
- History 1
- Iframes 9
- Nosniff 2
- Onblur 2
- PostMessage 1
- Redirects 1
- Regex Injections 1
- Service Workers 1
- Site Isolation 1
- Status Code 2
- TypeMustMatch 1
- Window.open 2
- Window.performance 1
- Window.stop 1
- AbortController 1
- Cache 1
- HTMLElement 1
Category
- Defense 15
- Historical 3
- Attack 18
- Attack Principle 1
- Experiments 2
- Instrument 1
Defenses
- Deprecation 2
- COOP 6
- Fetch Metadata 12
- SameSite Cookies 15
- Application Fix 1
- Browser Fix 1
- CORB 1
- Document Policies 2
- Framing Protections 6
- Subresource Protections 1
- Vary: Sec-Fetch-Site 1