5 ms·
HTML entities seem to break the parser. And FF warns of XSS if I want to share my XSS sample text: http://regviz.org/?state=%7B%22regex%22%3A%22XSS%22%2C%22mod
by elsamuko 12y ago
HTML entities seem to break the parser. And FF warns of XSS if I want to share my XSS sample text:
http://regviz.org/?state=%7B%22regex%22%3A%22XSS%22%2C%22modifier%22%3A%22gi%22%2C%22text%22%3A%22%3Cscript%C2%A0type%3D%5C%22text%2Fjavascript%5C%22%3Ealert(%5C%22XSS%5C%22)%3B%3C%2Fscript%3E%5Cn%5Cn%22%2C%22tests%22%3A%5B%7B%22start%22%3A33%2C%22length%22%3A7%7D%2C%7B%22start%22%3A41%2C%22length%22%3A11%7D%2C%7B%22start%22%3A57%2C%22length%22%3A10%7D%2C%7B%22start%22%3A89%2C%22length%22%3A10%7D%5D%7D http://regviz.org/?state=%7B%22regex%22%3A%22XSS%22%2C%22mod...