blob: f084e689bb16c3a97e07476c5487bdad7ee3763c (
plain)
1
2
3
4
5
6
7
8
|
Description: to break up expression (Thanks to Roman Ivanov for this one)
http://ha.ckers.org/xss.html#XSS_STYLE_comment
Options: -safe_attrs_only
Notes: Because of the suspicious stuff in there, the style is removed entirely
<IMG STYLE="xss:expr/*XSS*/ession(alert('XSS'))">
----------
<img>
|
