Skip to content

Instantly share code, notes, and snippets.

@fadyosman

fadyosman/example1.html

Created October 9, 2022 04:26
Show Gist options
  • Save fadyosman/4d06493c65a3460a32c8048def05064e to your computer and use it in GitHub Desktop.
Save fadyosman/4d06493c65a3460a32c8048def05064e to your computer and use it in GitHub Desktop.
Download ZIP
JS outdated library example
Raw
example1.html
<head>
<title>Jquery XSS Example</title>
<script src="https://code.jquery.com/jquery-3.6.1.min.js"
integrity="sha256-o88AwQnZB+VDvE9tvIXrMQaPlFFSUTR+nldQm1LuPXQ=" crossorigin="anonymous"></script>
<script src="https://code.jquery.com/ui/1.12.1/jquery-ui.min.js"
integrity="sha256-VazP97ZCwtekAsvgPBSUwPFKdrwD3unUfSGVYrahUqU=" crossorigin="anonymous"></script>
<script>
function init() {
$("#datepicker").datepicker({ altField: "dangerous if your input reaches here" });
};
</script>
</head>
<body>
<button onclick="init();">Click Me</button>
<div id="datepicker"></div>
</body>
Raw
example2.html
<head>
<title>Jquery XSS Example</title>
<script src="https://code.jquery.com/jquery-3.6.1.min.js"
integrity="sha256-o88AwQnZB+VDvE9tvIXrMQaPlFFSUTR+nldQm1LuPXQ=" crossorigin="anonymous"></script>
<script src="https://code.jquery.com/ui/1.12.1/jquery-ui.min.js"
integrity="sha256-VazP97ZCwtekAsvgPBSUwPFKdrwD3unUfSGVYrahUqU=" crossorigin="anonymous"></script>
<script>
// Shorthand for $( document ).ready()
$(function () {
$("#datepicker").datepicker({ altField: "dangerous if your input reaches here" });
});
</script>
</head>
<body>
<label for="datepicker">Date:</label>
<input type="text" id="datepicker"></div>
</body>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment