title: Is there charset encoding vulnerability in 2022?
body: <p>Does not specifying the charset in the content-type of the http response header lead to vulnerability, even in modern web browsers (Chrome, Firefox, Edge) as of 2022?</p>
  <p>I read the following article, but as of 2022, due to the efforts of web browser vendors, XSS attacks using utf-7 are no longer valid, and although garbled characters may occur, they will not be a vulnerability.</p>
  <p><a href="https://owasp.org/www-project-web-security-testing-guide/latest/6-Appendix/D-Encoded_Injection" rel="nofollow noreferrer">https://owasp.org/www-project-web-security-testing-guide/latest/6-Appendix/D-Encoded_Injection</a></p>
  <p><a href="https://stackoverflow.com/questions/33834152/security-vulnerabilities-without-meta-chartset-any-encoding-tag">Security Vulnerabilities without &lt;meta chartset=&lt;&lt;&quot;any-encoding&quot;&gt;&gt; /&gt; tag?</a></p>