From 85e29df90719b8cfc63f7652050129413994cc37 Mon Sep 17 00:00:00 2001 From: xanhacks Date: Mon, 3 Jul 2023 10:22:06 +0200 Subject: [PATCH] add innerText vs innerHTML --- content/en/docs/topics/xss.md | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/content/en/docs/topics/xss.md b/content/en/docs/topics/xss.md index 2ebc9de..6357ddd 100644 --- a/content/en/docs/topics/xss.md +++ b/content/en/docs/topics/xss.md @@ -64,6 +64,27 @@ self[Object.keys(self)[5]]("XSS") >>> Array(316) [ "close", "stop", "focus", "blur", "open", "alert", "confirm", "prompt", "print", "postMessage", … ] ``` +### innerHTML vs innerText + +```html + + + + +

<img src=x onerror=alert() />

+

+

+ + + +``` + ### Anchors fuzzing #### Javascript protocol