This is an
XSS vulnerability I've found in a practice site. So, I need to create an
alert() popup, but
alert() is changed to
prompt() by another script loaded before I give any input. (So I can't get rid of that script)
So how can I make an
The code strips
+ (I've only found these three) but changing my payload and injecting them doesn't seem to help.
window\["alert"](1) which is also detected. So are
I think I need to find another solution instead of alert(), but I have no clue where to proceed from here.