Timeline for Why does this XSS vector work in svg but not in HTML?
Current License: CC BY-SA 3.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 4, 2014 at 9:52 | review | Suggested edits | |||
| Jul 4, 2014 at 11:01 | |||||
| Jun 1, 2013 at 15:37 | comment | added | sh00pac |
When <svg> used ASCII encoding is possible otherwise not, anyway here is xss js append payload when following characters are NOT allowed ? = ( ) ; : ----------- might someone find it usefull ;) http://jsfiddle.net/sh00pac/GrnqV/
|
|
| Jun 1, 2013 at 11:07 | history | tweeted | twitter.com/#!/StackSecurity/status/340786745278865408 | ||
| May 31, 2013 at 17:06 | vote | accept | Daniel | ||
| May 31, 2013 at 9:37 | answer | added | bobince | timeline score: 21 | |
| May 30, 2013 at 23:21 | answer | added | AbsoluteƵERØ | timeline score: 3 | |
| May 30, 2013 at 22:40 | history | edited | Hendrik Brummermann | CC BY-SA 3.0 |
edited tags; edited title
|
| May 30, 2013 at 20:03 | history | edited | Daniel | CC BY-SA 3.0 |
added 2 characters in body
|
| May 30, 2013 at 19:47 | history | asked | Daniel | CC BY-SA 3.0 |