Update xss-example.js

mobb-dev · Jan 23, 2024 · ea2e012 · ea2e012
1 parent 00c3f68
commit ea2e012
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/xss-example.js b/xss-example.js
@@ -4,4 +4,5 @@ var urlParams = new URLSearchParams(window.location.search);
 var username = urlParams.get('username');
 
 var unsafe_div = window.document.getElementById("vulnerable-div");
-unsafe_div.innerHTML = "Hello to you ";
+// here's an XSS:
+unsafe_div.innerHTML = "Hello to you " + username;