diff --git a/README.md b/README.md index 6e5b434..d0e3ec5 100644 --- a/README.md +++ b/README.md @@ -17,8 +17,14 @@ Check if any value you control (parameters, path, headers, cookies) is reflected # Determine Reflection Context Raw HTML: Can you create new HTML tags or use attributes/events that support JavaScript? + + Inside HTML Tag: Can you exit to raw HTML or create events/attributes to execute JavaScript? + + Inside JavaScript Code: Can you escape the