Ed's code snippets.

code_snippets.md

Ed's code snippets

searchParamsXSS.js

/* 
	Name: XSS demo using the searchParams API
	Docs: https://developer.mozilla.org/en-US/docs/Web/API/URL/searchParams
	
	http://example.com/?q="><img/src=x onerror=alert(1)>

*/

var url = new URL(document.location.href);
var output = url.searchParams.get("q");
var element = document.createElement('div');    
element.id = "test";
document.body.appendChild(element);
document.getElementById("test").innerHTML = output;