privateloader

Hexadecimal URI Encoder

Sep 17th, 2017
322
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.73 KB | None | 0 0
  1. The first:
  2. If you write this simple code
  3. <html><script>alert();</script></html>
  4.  
  5. It will convert to
  6. data:text/html;utf-8,%3Chtml%3E%3Cscript%3Ealert()%3B%3C%2Fscript%3E%3C%2Fhtml%3E
  7.  
  8. But when execute in the browser it will convert to
  9. data:text/html;utf-8,<html><script>alert()%3B<%2Fscript><%2Fhtml>
  10.  
  11. Which is visible by the user if not executed in a iframe.
  12.  
  13. The second:
  14. After reviewing the code in the ghostbin, i found some useless line
  15. <tr><td><input type="hidden" name="visibility" id="visibility" value="data:text/html;utf-8,"></td></tr>
  16.  
  17. Solution:
  18. For the first is better off using URI Encoder.
  19. https://hackforums.net/showthread.php?tid=5712360
  20.  
  21. For the second there's no need to fix as the code doesn't do anything.
Advertisement
Add Comment
Please, Sign In to add comment