EXPLOITING A PARSER DIFFERENTIAL IN HTML AND GETTING XSS ON GOOGLE SEARCH
An actual XSS on google.com by Masato Kinugawa. It abuses a parser differential between a JavaScript enabled and disabled context.

Related Topics

Web Vulnerabilities
Chrome DevTools
JavaScript
HTML
Security Research
XSS
Compilers & Parsers