Skip to content

Instantly share code, notes, and snippets.

@jgamblin

jgamblin/noalert.html

Last active Aug 29, 2015
Embed
What would you like to do?
Evil Unicode Kills JavaScript PopUp
<!DOCTYPE html>
<html>
<body>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" >
<TITLE>effective. Power لُلُصّبُلُلصّبُررً ॣ ॣh ॣ ॣ 冗</TITLE>
</head>
<p>Evil Unicode Wont Allow Popup:</p>
<button onclick="myFunction()">Try It</button>
<script>
function myFunction() {
alert("\u0065\u0066\u0066\u0065\u0063\u0074\u0069\u0076\u0065\u002e\u0050\u006f\u0077\u0065\u0072\u0644\u064f\u0644\u064f\u0635\u0651\u0628\u064f\u0644\u064f\u0644\u0635\u0651\u0628\u064f\u0631\u0631\u064b \u0963 \u0963\u0068 \u0963 \u0963\u5197");
}
</script>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment