data-uris also work: #data:text/javascript,alert('pwn') | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		trias on May 29, 2014 \| parent \| context \| favorite \| on: Google's XSS game data-uris also work: #data:text/javascript,alert('pwn')

aidos on May 29, 2014 [–]

That's what I used too. Hosting scripts is far too much like hard work...

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact