Skip to content

Instantly share code, notes, and snippets.

@thypon thypon/Vulnfinder
Last active Dec 17, 2015

What would you like to do?
<!DOCTYPE html>
<html xmlns="" xml:lang="zh-CN" lang="zh-CN">
<script src="escape.js" type="text/javascript" charset="utf-8"></script>
<script type="text/javascript" language="javascript" charset="utf-8">
if (escapeHTML(document.url) != document.url) {
document.href = "XSS"
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta name="keywords" content="" />
<meta name="description" content="" />
<meta name="generator" content="gvim" />
<meta name="author" content="Andrea Brancaleoni" />
<link rel="icon" href="favicon.ico" type="image/x-icon" />
<link rel="shortcut icon" href="favicon.ico" type="image/x-icon" />
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.