Guest User

Untitled

a guest
Feb 20th, 2018
82
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.01 KB | None | 0 0
  1. var regex = /.*(script\b).*>.*<.*(script\b).*/gi;
  2.  
  3. var scripts = [
  4. "<script> alert(); </script>",
  5. "<< ScRiPT >alert(\"XSS\");//<</ ScRiPT >",
  6. "<script/src=test.js></script>",
  7. "<script src=test.js></script>",
  8. "<div><script> alert(); </script></div>",
  9. "<script+>alert();</script>",
  10. "<script/script>", //valid
  11. "<scripting></scripting>", // valid
  12. "<script/src=test.js/>" // valid
  13. ]
  14.  
  15. var x = document.getElementById('x');
  16.  
  17. scripts.forEach(function(script) {
  18. var i = document.createElement('input');
  19. i.value = script;
  20.  
  21. x.appendChild(i);
  22. x.appendChild(document.createElement('br'));
  23. })
  24.  
  25. var btn = document.createElement('button');
  26. btn.innerHTML = 'Click Me';
  27. btn.addEventListener('click', function(e) {
  28. checkInputs();
  29. });
  30.  
  31. x.appendChild(btn);
  32.  
  33. function checkInputs() {
  34. var inputs = document.getElementsByTagName('input');
  35. if (!inputs) {
  36. inputs = []
  37. }
  38.  
  39. for(var i = 0; i < inputs.length; i++) {
  40. var input = inputs[i];
  41. if(input) {
  42. var output = input.value.match(regex);
  43. console.log(output)
  44. }
  45. }
  46. }
Add Comment
Please, Sign In to add comment