Is there a way to execute XSS? on 302 redirect and the body on the page?
<HTML><HEAD> <TITLE>302 Moved Temporarily</TITLE> </HEAD> <BODY> The document has moved <A HREF="https://Example.com/">here</A> </BODY></HTML>
I can breakout with
" but i can't use any character after
< or whole parameter would be removed.
Maybe there is a workaround to "stop" the redirect and show HTML? I'm almost 99.99% sure there is a way to break it somehow.