Timeline for How is this XSS attack working?
Current License: CC BY-SA 3.0
2 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 9, 2014 at 15:48 | comment | added | Rahil Arora |
But it can reach the method as a param string and become a part of the statement in the method. Like: seconds = parseInt('3') || alert('1') || 3
|
|
| Jun 9, 2014 at 15:38 | history | answered | Xatenev | CC BY-SA 3.0 |