1
0
mirror of https://github.com/minimaxir/big-list-of-naughty-strings.git synced 2025-09-25 21:29:36 +02:00

Merge pull request #64 from DripDrop14/master

Added `<plaintext>` in response to kizu's issue.
This commit is contained in:
Max Woolf
2015-08-24 08:41:05 -07:00
2 changed files with 3 additions and 2 deletions

View File

@@ -392,6 +392,7 @@
"<IMG SRC=\"javascript:alert('XSS')\"", "<IMG SRC=\"javascript:alert('XSS')\"",
"<iframe src=http://ha.ckers.org/scriptlet.html <", "<iframe src=http://ha.ckers.org/scriptlet.html <",
"\\\";alert('XSS');//", "\\\";alert('XSS');//",
"<plaintext>",
"1;DROP TABLE users", "1;DROP TABLE users",
"1'; DROP TABLE users-- 1", "1'; DROP TABLE users-- 1",
"' OR 1=1 -- 1", "' OR 1=1 -- 1",

View File

@@ -474,7 +474,7 @@ perl -e 'print "<IMG SRC=java\0script:alert(\"XSS\")>";' > out
<IMG SRC="javascript:alert('XSS')" <IMG SRC="javascript:alert('XSS')"
<iframe src=http://ha.ckers.org/scriptlet.html < <iframe src=http://ha.ckers.org/scriptlet.html <
\";alert('XSS');// \";alert('XSS');//
<plaintext>
# SQL Injection # SQL Injection
# #