This causes an HTML textarea that is filled with unescaped input to break and execute a simple JavaScript.
This commit is contained in:
parent
98056309f9
commit
2ea9147278
@ -394,6 +394,7 @@
|
||||
"PGlmcmFtZSBzcmM9aHR0cDovL2hhLmNrZXJzLm9yZy9zY3JpcHRsZXQuaHRtbCA8Cg==",
|
||||
"IjthbGVydCgnWFNTJyk7Ly8K",
|
||||
"PHBsYWludGV4dD4K",
|
||||
"PC90ZXh0YXJlYT48c2NyaXB0PmFsZXJ0KDEyMyk8L3NjcmlwdD4=",
|
||||
"MTtEUk9QIFRBQkxFIHVzZXJzCg==",
|
||||
"MSc7IERST1AgVEFCTEUgdXNlcnMtLSAxCg==",
|
||||
"JyBPUiAxPTEgLS0gMQo=",
|
||||
|
@ -495,6 +495,7 @@ PGlmcmFtZSBzcmM9aHR0cDovL2hhLmNrZXJzLm9yZy9zY3JpcHRsZXQuaHRtbCA8Cg==
|
||||
IjthbGVydCgnWFNTJyk7Ly8K
|
||||
PHBsYWludGV4dD4K
|
||||
aHR0cDovL2EvJSUzMCUzMAo=
|
||||
PC90ZXh0YXJlYT48c2NyaXB0PmFsZXJ0KDEyMyk8L3NjcmlwdD4=
|
||||
|
||||
# SQL Injection
|
||||
#
|
||||
|
@ -415,6 +415,7 @@
|
||||
"<i onwheel=alert(1)> Scroll over me </i>",
|
||||
"<plaintext>",
|
||||
"http://a/%%30%30",
|
||||
"</textarea><script>alert(123)</script>",
|
||||
"1;DROP TABLE users",
|
||||
"1'; DROP TABLE users-- 1",
|
||||
"' OR 1=1 -- 1",
|
||||
|
Loading…
x
Reference in New Issue
Block a user