ssl/ezXSS

can't remove old custom javascript payload, and can't disable screenshots

yoerivegt opened this issue · 1 comments

Hey!

I'm quite unsure what could have caused this, but I've got disabled the "Screenshot" checkbox, and got nothing in my "Custom javascript" input. However, it seems like the following js is always present on the payload page:

function ez_r() { 
alert(document.domain)
}

And the "html2canvas" stays present on the payload page all the time? Is this supposed to be?

What could be causing this? And how could I fix it?

Thanks!
For reference:
image
image

was looking at the wrong panel, sorry!

For anyone having the same issue, check out https://[domain]/manage/payload/edit/1 , instead of the global admin settings!