Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with javascript
Search options not deleted
user 169503
The common name for the language used primarily for scripting in web browsers. It is not related to the Java language. Standardized as ECMAScript, its dialects/implementations include JavaScript and JScript.
1
vote
Accepted
XSS found in the United Airlines website
However, in the event that you manage to find a CSP bypass, XSSObject.proxy will override those functions anyway, because a javascript src runs on the page it is called. …
- 511
1
vote
XSS attack vsibible in html but no running
If the payload appears like "<script type="text/javascript">alert("XSS");</script>", which is the case for when you try it on StackExchange sites, you can see that the double quotes …
- 511
0
votes
XSS prevention via JavaScript
Some of the functions that you have mentioned, alert, confirm, prompt, are often only used by people who want to prove that there's an XSS by making a PoC.
There's countless other ways to trigger XS …
- 511
0
votes
How to prevent self-XSS?
Like what Luc has said, it is impossible to completely prevent XSS, or anything security-related actually.
However, unlike the other answers which state that you only can display a visual warning usi …
- 511