Cross-Site Scripting (XSS) example

<script> // https://www.owasp.org/index.php/Cross-site_Scripting_(XSS) var html = '<img src="http://url.to.file.which/not.exist" onerror=alert(document.cookie)>'; document.body.innerHTML = html; </script>

Join the 4+ million users, and keep the JSFiddle dream alive.

Ad-free

All ads in the editor and listing pages are turned completely off.
Fiddle Pages

Your fiddles accessible under a custom domain and a vanity path - the simplest hosting for your personal project.
Use pre-released features

You get to try and use features (like the Palette Color Generator) months before everyone else.
Fiddle collections

Sort and categorize your Fiddles into multiple collections.
Private collections and fiddles

You can make as many Private Fiddles, and Private Collections as you wish!

Cross-Site Scripting (XSS) example

Example of a cross-site scripting (XSS) attack

HTML

Please Whitelist JSFiddle in your content blocker.

Join the 4+ million users, and keep the JSFiddle dream alive.

Ad-free

Fiddle Pages

Use pre-released features

Fiddle collections

Private collections and fiddles

Get Fiddle Pages with PRO