tag:blogger.com,1999:blog-5957943573289282822.post1456352199934173989..comments2024-01-13T11:32:07.558+01:00Comments on Respect XSS: A Hardcore XSSAnonymoushttp://www.blogger.com/profile/07292272580854367942noreply@blogger.comBlogger5125tag:blogger.com,1999:blog-5957943573289282822.post-21097905893381147122016-04-12T12:29:07.307+02:002016-04-12T12:29:07.307+02:00Try this link: http://www.lg.com/uk/search.lg
I ha...Try this link: http://www.lg.com/uk/search.lg<br />I have HTML encoded paranthesys to make the payload work (because browser will un-encode it right?) but I still get no alert. <br />Do you have any suggestions Ashar?<br /><br />PS: The " is not encoded/escaped.<br />payloads tried: <br />" onload="confirm(1)<br />" onload="confirm&lpar;1&rpar;Bogdanhttps://www.blogger.com/profile/13583627283248941939noreply@blogger.comtag:blogger.com,1999:blog-5957943573289282822.post-68247020430698459902015-12-25T19:47:55.421+01:002015-12-25T19:47:55.421+01:00I think it is not common XSS and at the same time,...I think it is not common XSS and at the same time, the fix is more hardcore because one has to keep in mind the correct escaping order. I have seen many cases where there is wrong escaping order or something missing. Anonymoushttps://www.blogger.com/profile/07292272580854367942noreply@blogger.comtag:blogger.com,1999:blog-5957943573289282822.post-24494117816318151042015-12-25T17:09:56.057+01:002015-12-25T17:09:56.057+01:00I don't Know why the name is "Hardcore&qu...I don't Know why the name is "Hardcore".. Nice Work but this a one of xss type that you could be in my daily jobs perfoming web pages.<br /><br />But it's very NiceJuan Carlos García https://www.blogger.com/profile/05989849728363342007noreply@blogger.comtag:blogger.com,1999:blog-5957943573289282822.post-41936709292739440292015-12-25T17:09:41.984+01:002015-12-25T17:09:41.984+01:00I don't Know why the name is "Hardcore&qu...I don't Know why the name is "Hardcore".. Nice Work but this a one of xss type that you could be in my daily jobs perfoming web pages.<br /><br />But it's very NiceJuan Carlos García https://www.blogger.com/profile/05989849728363342007noreply@blogger.comtag:blogger.com,1999:blog-5957943573289282822.post-22081428360581787862015-12-25T13:28:38.639+01:002015-12-25T13:28:38.639+01:00Nice work (y)Nice work (y)Anonymoushttps://www.blogger.com/profile/18324467772134628092noreply@blogger.com