domxss.js

/*
 * This is a JavaScript Scratchpad.
 *
 * Enter some JavaScript, then Right Click or choose from the Execute Menu:(
 * 1. Run to evaluate the selected text (Ctrl+R),
 * 2. Inspect to bring up an Object Inspector on the result (Ctrl+I), or,
 * 3. Display to insert the result in a comment after the selection. (Ctrl+L)
 */

/* document.write(document.location.href.substr(
 *   document.location.href.search(
 *       /#welcomemessage/i)+16, document.location.href.length))
 *
 */

/*
Exception: The operation is insecure.
@12
*/

/*function getID(id){
 *   console.log('id: ' + id);
 *}

* var url = window.location.href;
* var pos = url.indexOf("id=")+3;
* var len = url.length;
* var id = url.substring(pos, len);
* eval('getId(' + id.toString() + ')');
*
Exception: The operation is insecure.
@12
*/
/*
Exception: missing ) after argument list
@Scratchpad/1:29
*/
/*
var sneaky = 'setTimeout("alert(document.cookie);",4000);
    document.location.assign("http://www.gmail.com");';
    document.location =
    `chromehtml:"80%20javascript:document.write(sneaky)"';

Exception: unterminated string literal
@Scratchpad/1:39
*/