<a href="https://website.com"><span style="color: black;">text</span></a>

I am trying to bypass an XSS filter but it is not working since given <, > are filtered and become &lt and &gt.

Any suggestion on this?

  • There are so many questions just like this here. Have a look around the xss tag – schroeder Mar 23 at 14:03

Browse other questions tagged or ask your own question.