@inproceedings{KleJoh24, author = {Klein, David and Johns, Martin}, booktitle = {45th IEEE Symposium on Security and Privacy}, title = {{Parse Me, Baby, One More Time: Bypassing HTML Sanitizer via Parsing Differentials}}, year = {2024}, month = may, doi = {10.1109/SP54263.2024.00092}, note = {to appear} }