XSS Firewall Bypass

• Check if the firewall is blocking only lowercase

• Try to break firewall regex with the new line(\r\n)

• Try Double Encoding

• Testing for recursive filters

• Injecting anchor tags without whitespaces

• Try to bypass whitespaces using Bullet

• Try to change request method