Shazzer had an interesting bug.

[gaz@infosec.exchange]

Shazzer had an interesting bug. I write to a blob URL thats sandboxed but because its a blob URL it breaks relative URLs which means vectors with them would return false negatives. The fix was: use a base tag to change the domain. This fixes vectors like:

relative & protocol relative url starting with a slash and not immediately having a slash after it. - Shazzer

test

(shazzer.co.uk)