Merge pull request #491 from Ooggle/patch-1

Add XSS document blacklist bypass
This commit is contained in:
Swissky 2022-04-18 20:59:20 +02:00 committed by GitHub
commit 629f6d6cef
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

@ -725,6 +725,7 @@ $ echo "<svg^Lonload^L=^Lalert(1)^L>" | xxd
```javascript
<div id = "x"></div><script>alert(x.parentNode.parentNode.parentNode.location)</script>
window["doc"+"ument"]
```
### Bypass using javascript inside a string