5 ms·
On level 3: https://xss-game.appspot.com/level3/frame#'/><script>alert(1)</script> will execute on load rather than after user input.
by n_ 10y ago
On level 3:
https://xss-game.appspot.com/level3/frame#'/><script>alert(1)</script>
will execute on load rather than after user input.
- maaarghk 10y agoyeah, as the notes say you would use onload IRL.