So I was experimenting with XSS using new line (%0A) character. So I got to the usual vector: '%0Aalert(/xss/)// and one thing came to my mind. What if you can't insert a quote?
A new line will break the string so you can insert code. However, the syntax error (Unterminated string) will prevent the script from executing. Is there any way around it?
Thank you!
var j='junk'\nalert(/xss/)//
?