--- title: "Exploiting XSS with Javascript/JPEG Polyglot" url: https://daily.dev/posts/exploiting-xss-with-javascript-jpeg-polyglot-dh6wzougv source_url: https://infosecwriteups.com/exploiting-xss-with-javascript-jpeg-polyglot-4cff06f8201a?source=rss----7b722bfd1b8d---4 type: article source: "InfoSec Write-ups" published: 2022-12-29T12:29:56.140Z updated: 2022-12-29T12:29:56.136Z tags: ["javascript", "php"] reading_time: 3 upvotes: 19 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Exploiting XSS with Javascript/JPEG Polyglot **[InfoSec Write-ups](https://daily.dev/sources/infosecwriteups)** · 3 min read · 19 upvotes · 0 comments ## Summary Polyglots are a combination of two different file types. Applications allow only certain file types on features like file upload and don’t allow other file types like.php or.js files as these can enable the attacker to upload malicious files on the application. Mozilla fixed this in Firefox 51 and after versions. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 0 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments --- Tags: [#javascript](https://daily.dev/tags/javascript), [#php](https://daily.dev/tags/php) [View this post on daily.dev](https://daily.dev/posts/exploiting-xss-with-javascript-jpeg-polyglot-dh6wzougv)