Skip to content

Instantly share code, notes, and snippets.

@richo
Created December 1, 2016 22:30
Show Gist options
  • Save richo/6b4a42727257ab0cb6556e13e9e42839 to your computer and use it in GitHub Desktop.
Save richo/6b4a42727257ab0cb6556e13e9e42839 to your computer and use it in GitHub Desktop.
<!doctype html>
<html lang=en>
<head>
<meta charset=utf-8>
<title></title>
</head>
<body>
<script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>
<div id="payload"></div>
<script>
// Oh no
var malicious = "<script>alert(1)</script>"
var payload = $('#payload');
payload.html
</script>
</body>
</html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment