apexblack-buffalo-npm-xss-render-test 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +24 -0
- package/index.js +1 -0
- package/package.json +7 -0
package/README.md
ADDED
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
# XSS Render Test Package
|
|
2
|
+
|
|
3
|
+
## SVG Payload
|
|
4
|
+
<svg xmlns="http://www.w3.org/2000/svg"><script>console.log("CANARY-NPM-SVG-SCRIPT")</script><rect width="100" height="100" fill="red"/></svg>
|
|
5
|
+
|
|
6
|
+
## HTML Injection
|
|
7
|
+
<div onmouseover="console.log('CANARY-NPM-HTML')">Hover me</div>
|
|
8
|
+
<img src=x onerror="console.log('CANARY-NPM-IMG')">
|
|
9
|
+
<details open ontoggle="console.log('CANARY-NPM-DETAILS')"><summary>Click</summary>hidden</details>
|
|
10
|
+
|
|
11
|
+
## JavaScript Link
|
|
12
|
+
[Click me](javascript:console.log('CANARY-NPM-JS-URI'))
|
|
13
|
+
|
|
14
|
+
## Data URI Link
|
|
15
|
+
[Data URI](data:text/html,<script>console.log('CANARY-NPM-DATA-URI')</script>)
|
|
16
|
+
|
|
17
|
+
## Iframe
|
|
18
|
+
<iframe src="javascript:console.log('CANARY-NPM-IFRAME')"></iframe>
|
|
19
|
+
|
|
20
|
+
## Form Action
|
|
21
|
+
<form action="javascript:console.log('CANARY-NPM-FORM')"><button>Submit</button></form>
|
|
22
|
+
|
|
23
|
+
## Original markdown should still work
|
|
24
|
+
Normal paragraph with **bold** and *italic* text.
|
package/index.js
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
module.exports = function() { return "hello"; };
|