This repository has been archived by the owner on May 17, 2022. It is now read-only.

Detecting XSS Polyglots #31

Open

vdun opened this issue May 26, 2017 · 0 comments

Labels

vdun commented May 26, 2017

How could xssValidator detect this XSS [1] using this XSS-Polyglot [2] ?

[1] https://public-firing-range.appspot.com/reflected/parameter/body?q=/*-/*`/*\`/*%27/*%22/**/(/*%20*/oNcliCk=alert()%20)//%0D%0A%0d%0a//%3C/stYle/%3C/titLe/%3C/teXtarEa/%3C/scRipt/--!%3E\x3csVg/%3CsVg/oNloAd=alert()//%3E\x3e
[2] https://github.com/0xsobky/HackVault/wiki/Unleashing-an-Ultimate-XSS-Polyglot

nvisium-shawn-smith added the question label

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.