Entities that convert to less than in a iframe srcdoc

3

3

3

This shows which entities convert to the less than character inside a iframe srcdoc. Inspired by: https://x.com/therceman/status/1803666353892585642

Created on: Thursday, August 1, 2024 at 11:25:53 AM

Updated on: Thursday, December 12, 2024 at 1:26:50 PM

Vector type: XSS

Vector charset: UTF-8

<iframe srcdoc="$[data1]" id=x></iframe>

if(x.srcdoc.includes("<"))log('$[data1]')