Timeline for Xss payload with onpointerover?
Current License: CC BY-SA 4.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 18, 2019 at 16:32 | comment | added | Conor Mancone |
You probably could have just put your base64 encoded string directly in the call to atob as a string (encoded with single quotes), but either way that's a fun trick to keep in the back of my brain!
|
|
| Sep 18, 2019 at 16:31 | comment | added | Conor Mancone |
Definitely a glaring XSS vulnerability on their part. I'm surprised their WAF let eval through, but hey, makes it easier for you!
|
|
| Sep 18, 2019 at 16:30 | history | edited | Conor Mancone | CC BY-SA 4.0 |
deleted 19 characters in body
|
| Sep 18, 2019 at 16:27 | history | edited | rapanui papalegbas | CC BY-SA 4.0 |
added 24 characters in body
|
| Sep 18, 2019 at 16:21 | history | answered | rapanui papalegbas | CC BY-SA 4.0 |