Loveme5454 (talk | contribs) (ed) |
Loveme5454 (talk | contribs) (ed) |
||
| Line 1: | Line 1: | ||
<div style="font-family:'foo ;color:red;';">XXX | <div style="font-family:'foo ;color:red;';">XXX | ||
<div style="font-family:foo}color=red;">XXX | <div style="font-family:foo}color=red;">XXX | ||
<DIV STYLE="background-image: | <DIV STYLE="background-image:x"> | ||
<DIV STYLE="width: expression( | <DIV STYLE="width: expression();"> | ||
<DIV STYLE="background-image: url(javascript: | <DIV STYLE="background-image: url(javascript:)"> | ||
<div><iframe src=x> | <div><iframe src=x> | ||
<// style=x:expression\28javascript:alert(1)\29> | <// style=x:expression\28javascript:alert(1)\29> | ||
<style>*{x:ｅｘｐｒｅｓｓｉｏｎ(javascript:alert(1))}</style> | <style>*{x:ｅｘｐｒｅｓｓｉｏｎ(javascript:alert(1))}</style> | ||
Revision as of 19:20, 25 May 2018
XXX
XXX
<iframe src=x>
<// style=x:expression\28javascript:alert(1)\29> <style>*{x:ｅｘｐｒｅｓｓｉｏｎ(javascript:alert(1))}</style>
