mirror of
https://github.com/minimaxir/big-list-of-naughty-strings.git
synced 2025-09-25 13:19:15 +02:00
Merge pull request #57 from dehrgg/patch-1
Add HTML encoded XSS attack vector
This commit is contained in:
1
blns.txt
1
blns.txt
@@ -242,6 +242,7 @@ Z̮̞̠͙͔ͅḀ̗̞͈̻̗Ḷ͙͎̯̹̞͓G̻O̭̗̮
|
||||
# Strings which attempt to invoke a benign script injection; shows vulnerability to XSS
|
||||
|
||||
<script>alert(123)</script>
|
||||
<script>alert('123');</script>
|
||||
<img src=x onerror=alert(123) />
|
||||
<svg><script>123<1>alert(123)</script>
|
||||
"><script>alert(123)</script>
|
||||
|
Reference in New Issue
Block a user