readme.md

Simple example to play with cross-site scripting.

index.html

<b>Hi, <span id="name"></span>,</b><br>
Enter your deepest secret and I'll remeber it:<br>
<input type="text" id="secret"><button onClick="save()">Save</button>
<script>
// Load name from location.hash
document.getElementById("name").innerHTML = window.location.hash;
// Load existing secret
document.getElementById("secret").value = (localStorage.secret || 42);
// Save secret
function save() {
  localStorage.secret = document.getElementById("secret").value;
}
</script>