mobinyardim/next-router-xss-bug

Getting Started

First, run the development server:

npm run dev

Next, open this URL in your browser (submit form with random data) to simulate an XSS attack on the website:

localhost:3000/auth?redirect-url=javascript%3Aalert%28%27xss%27%29

For a custom payload, use the following format:

localhost:3000/auth?redirect-url=${your_js_code_here_url_encoded}