Skip to content

Instantly share code, notes, and snippets.

@kaiili

kaiili/check.js

Last active January 29, 2024 05:01
Show Gist options
  • Save kaiili/73f9c284e06b1f239bc7415c3a0f9ae1 to your computer and use it in GitHub Desktop.
Save kaiili/73f9c284e06b1f239bc7415c3a0f9ae1 to your computer and use it in GitHub Desktop.
Download ZIP
XSS all in one
Raw
check.js
dom.querySelector("script") ||
dom.querySelector("svg") ||
dom.querySelector("meta") ||
dom.querySelector("x") || // todo: x:script
dom.querySelector("object[data]") ||
dom.querySelector("iframe[src]") ||
dom.querySelector("iframe[srcdoc]") ||
dom.querySelector("embed[src]") ||
dom.querySelector("base[href]") ||
dom.querySelector("form[formaction]") ||
dom.querySelector("form[action]") ||
dom.querySelector("[onerror]") ||
dom.querySelector("[onload]") ||
dom.querySelector("[onclick]") ||
dom.querySelector("[onchange]") ||
dom.querySelector("[onclose]"));
// and more onxxx...
@kaiili
Copy link
Author

kaiili commented Jan 29, 2024

https://portswigger.net/research/evading-defences-using-vuejs-script-gadgets

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment