Skip to content

Instantly share code, notes, and snippets.

@tgrecojs

tgrecojs/demo-xss-script.js

Created November 26, 2022 16:27
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save tgrecojs/09fa15768bda0b8724a9447f088da096 to your computer and use it in GitHub Desktop.
Save tgrecojs/09fa15768bda0b8724a9447f088da096 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
demo-xss-script.js
(function(){
const url = top._CVE_URL;
alert(`this message originated in a script that was successfully fetched from "${url}" [even though "${top.location.hostname}"'s Content Security Policy may not allow it!] (CVE-2020-6519)`);
}())
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment