Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- The first:
- If you write this simple code
- <html><script>alert();</script></html>
- It will convert to
- data:text/html;utf-8,%3Chtml%3E%3Cscript%3Ealert()%3B%3C%2Fscript%3E%3C%2Fhtml%3E
- But when execute in the browser it will convert to
- data:text/html;utf-8,<html><script>alert()%3B<%2Fscript><%2Fhtml>
- Which is visible by the user if not executed in a iframe.
- The second:
- After reviewing the code in the ghostbin, i found some useless line
- <tr><td><input type="hidden" name="visibility" id="visibility" value="data:text/html;utf-8,"></td></tr>
- Solution:
- For the first is better off using URI Encoder.
- https://hackforums.net/showthread.php?tid=5712360
- For the second there's no need to fix as the code doesn't do anything.
Advertisement
Add Comment
Please, Sign In to add comment