Register

exp/*XSS

November 2, 2018
'<nav class="top-bar" data-topbar data-options="back_text: Zurück"><ul><li>foo</li><li>bar</li></ul></nav>' => '<nav class="top-bar" data-topbar data-options="back_text: Zurück"><ul><li>foo</li><li>bar</li></ul></nav>',   '<a href="http://suckup.de/about">About</a>' => '<a href="http://suckup.de/about">About</a>',   "<a href='http://suckup.de/about'>About</a>" => "<a href='http://suckup.de/about'>About</a>",   '<a href="http://moelleken.org/Kontakt/" class="mail"><i class="fa fa-envelope fa-3x"></i></a>' => '<a href="http://moelleken.org/Kontakt/" class="mail"><i class="fa fa-envelope fa-3x"></i></a>',   '<a href="https://plus.google.com/u/0/115714615799970937533/about" rel="me" title="Add Me To Your Circle"><i class="fa fa-google-plus fa-3x"></i></a>' => '<a href="https://plus.google.com/u/0/115714615799970937533/about" rel="me" title="Add Me To Your Circle"><i class="fa fa-google-plus fa-3x"></i></a>',   'eval is evil and xss is bad, but this is only a string : ...' => 'eval is evil and xss is bad, but this is only a string : ...',   '<a href="https://test.com?lall=123&lall=312">test&amp;</a>' => '<a href="https://test.com?lall=123&lall=312">test&amp;</a>',   '&lt;a href="https://test.com?lall=123&lall=312">test&amp;&lt;/a&gt;' => '&lt;a href="https://test.com?lall=123&lall=312">test&amp;&lt;/a&gt;',   '<a href="https://test.com?lall=123&lall=312&lall=999">test&amp;</a>' => '<a href="https://test.com?lall=123&lall=312&lall=999">test&amp;</a>',   '<p>&lt;h1&gt;<a href="https://mbd.baidu.com/newspage/data/landingsuper?context=%7B%22nid%22%3A%22news_15446515888862039806%22%7D&amp;n_type=0&amp;p_from=1" target="_blank">Special url</a>&lt;/h1&gt; User content %7B%7B Test 123</p>' => '<p>&lt;h1&gt;<a href="https://mbd.baidu.com/newspage/data/landingsuper?context=%7B%22nid%22%3A%22news_15446515888862039806%22%7D&amp;n_type=0&amp;p_from=1" target="_blank">Special url</a>&lt;/h1&gt; User content %7B%7B Test 123</p>',   '<a href="https://mbd.baidu.com/newspage/data/landingsuper?context=%7B%22nid%22%3A%22news_15446515888862039806%22%7D&amp;n_type=0&amp;p_from=1" target="_blank">Valid Link</a>' => '<a href="https://mbd.baidu.com/newspage/data/landingsuper?context=%7B%22nid%22%3A%22news_15446515888862039806%22%7D&amp;n_type=0&amp;p_from=1" target="_blank">Valid Link</a>',   '<a href="https://mbd.baidu.com/newspage/data/landingsuper?context=%7B%22nid%22%3A%22news_15446515888862039806%22%7D&n_type=0&p_from=1" target="_blank">Valid Link</a>' => '<a href="https://mbd.baidu.com/newspage/data/landingsuper?context=%7B%22nid%22%3A%22news_15446515888862039806%22%7D&n_type=0&p_from=1" target="_blank">Valid Link</a>',   '' => '',   ' ' => ' ',   null => '',   true => 1,   false => 0,   0 => 0,   '0.0' => '0.0',   'GOM-KC-350+550' => 'GOM-KC-350+550',   'Chassis+FanTray10G-VSS' => 'Chassis+FanTray10G-VSS', // issue #34   '3+ years of experience' => '3+ years of experience',   ' foo ' . "\xe2\x80\xa8" . ' öäü' . "\xe2\x80\xa9" => ' foo ' . "\xe2\x80\xa8" . ' öäü' . "\xe2\x80\xa9",   " foo\t foo " => ' foo foo ',   'a="get";' => 'a="get";',   '<x 1=">" onxxx=1 (text outside tag)' => '<x 1=">" onxxx=1 (text outside tag)',   '<a href="https://url.com" target="_blank" >Click Here for the 2017 Summit Review</a>' => '<a href="https://url.com" target="_blank" >Click Here for the 2017 Summit Review</a>',   '<a href="https://url.com" target="_blank">Click Here for the 2017 Summit Review</a>' => '<a href="https://url.com" target="_blank">Click Here for the 2017 Summit Review</a>',

Comments

  • Be the first one to write your comment about this news!
See all items
Offline