All Questions
4 questions
1
vote
0
answers
64
views
Is it possible to bypass a html <> regex? [closed]
I need to bypass a regex filter that filters all between <>
I tried almost everything, so this is my last chance.
The regex look like this: result.replace(/<[^>]*>?/gm, '');
I need to ...
- 11
2
votes
2
answers
6k
views
How do I bypass a regex filter that filters all html to avoid xss?
How do I bypass a regex filter that filters all html to avoid xss? I've tried using things like <img src="aa" onerror="alert(1)"> but still no luck. This is for a CTF ...
- 21
1
vote
1
answer
1k
views
Possible to bypass this regex for XSS?
When testing for XSS, is it at all possible to bypass the below regex? I doubt it because it only accepts uppercase and lowercase letters, but maybe?
/^[A-Za-z]+$/
0
votes
1
answer
124
views
How to filter HTML Event in Native PHP7
i want to creating xss filter for my own project, this is for html event filtering
preg_replace("/ on\w+='[^']*'/i", '', preg_replace('/ on\w+="[^"]*"/i', '', $framed));
but considering to more ...
