Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [reflected-xss]

The tag has no usage guidance.

2
votes
1answer
3k views

XSS - double quote and backslash escaping

I'm currently testing my own XSS filter and don't know if I thought everything through, so I need some advice. Let's say my code looks like this: <script> var test = {src: "test", layer: {"...
1
vote
2answers
332 views

Is all reflected XSS bad?

I stumbled on a site today that was vulnerable to XSS. I was able to get an alert box to display via an input box and some JavaScript. I was about to report this to the site owner, but I realized ...
4
votes
1answer
3k views

How to perform XSS in hidden HTML input fields using accesskey?

I am trying to insert a XSS payload into a hidden HTML input field. I know it works with a script tag like below, but I am looking for other alternatives. <input type="hidden" name="date" value=""/...
1
vote
1answer
4k views

Bypassing <, > XSS filter

<img class="avatar" src="MY INPUT SPACE"> I am trying to bypass an XSS filter but it is not working since given <, > are filtered. I feel like it I could break it since only these two ...
0
votes
1answer
529 views

What is the XSS auditor in Chrome/Firefox and how do I find bypasses?

I've been doing a lot of bug bounties lately and although I've been gaining reputation and experience, I never seem to find XSS even in private programs. Items are always being reflected as HTML. It ...