Skip to content

Instantly share code, notes, and snippets.

@uploadcare-user

uploadcare-user/section2-example-entities.html Secret

Created March 29, 2018 15:03
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save uploadcare-user/090afb423fb9a8cc0f1b526bbcf25996 to your computer and use it in GitHub Desktop.
Save uploadcare-user/090afb423fb9a8cc0f1b526bbcf25996 to your computer and use it in GitHub Desktop.
Download ZIP
Short snippet showing how things can get if you decide to use HTML entities in a malicious string
Raw
section2-example-entities.html
<script>
var s = "surprise!&lt;/script&gt;&lt;script&gt;alert('whoops!')&lt;/script&gt;";
</script>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment