sirdarckcat

var HANDICAP = 10*2;
var reqs = [];
function fetchReq() {
  Promise.resolve().then(
    reqs.length?
    reqs.pop():
    _=>0
  ).then(
    _=>setTimeout(fetchReq, 1)
  );

sirdarckcat

<script>
  window.oncontextmenu=window.onauxclick=window.onclick=function(e){
    with(document.body.appendChild(document.createElement('div'))){
      style.left=e.clientX+'px';
      style.top=e.clientY+'px';
      style.position='absolute';
      style.height='0';
      style.width='0';
      style.opacity='0.1';
      style.boxShadow='0 0 0 '+(Math.random()*800+5)+'px #'+Math.floor(Math.random()*0xFFFFFF).toString(16);

sirdarckcat

{<sc{r}ipt.*?>}
{<sc{r}ipt.*?[ /+\t]*?((src)|(xlink:href)|(href))[ /+\t]*=}
{<BUTTON[ /+\t].*?va{l}ue[ /+\t]*=}
{<fo{r}m.*?>}
{<OPTION[ /+\t].*?va{l}ue[ /+\t]*=}
{<INPUT[ /+\t].*?va{l}ue[ /+\t]*=}
{<is{i}ndex[ /+\t>]}
{<TEXTA{R}EA[ /+\t>]}
{<.*[:]vmlf{r}ame.*?[ /+\t]*?src[ /+\t]*=}
{<[i]?f{r}ame.*?[ /+\t]*?src[ /+\t]*=}

sirdarckcat

application: jquery-mobile-xss
version: 1
runtime: python27
api_version: 1
threadsafe: yes

handlers:
- url: /.*
  script: main.APP

sirdarckcat

Code for https://chrome.google.com/webstore/detail/ohcfioimjbmanibdlkhbcndkbdibpkpg