none
<script>alert(1)</script> RRS feed

All replies

  • I am very sorry, Othman3, but your XSS does not work :(

    Here is the reason:Even if you add a script tag in the "html-section" of the text-box it will be cleaned when submitting.

    Do you think microsoft is so dump?

    Try it out: When pasting the code in the normal textbox (as you did), it will use it as normal script. When using html, than it will be removed.


    © 2015 Thomas Roskop
    Germany //  Deutschland


    Sunday, November 22, 2015 6:56 PM