btw for cve-2023-0002, neonz said u could not reproduce the images due to urlify breaking it, so here is how I produced it.
Below is how I got around urlify:
<img src="hi.hi">
as u can see, I used . for the period instead of using an actual period to get around urlify. u could have also used a base64 link as well in src as there is no period being used in base64.
btw for cve-2023-0002, neonz said u could not reproduce the images due to urlify breaking it, so here is how I produced it.
Below is how I got around urlify:
<img src="hi.hi">
as u can see, I used . for the period instead of using an actual period to get around urlify. u could have also used a base64 link as well in src as there is no period being used in base64.