Entities that convert to greater than in a iframe srcdoc
This shows which entities convert to the greater than character inside a iframe srcdoc. Inspired by: https://x.com/therceman/status/1803666353892585642
Created by: hackvertor
Created on: Thursday, August 1, 2024 at 5:39:17 PM
Updated on: Tuesday, September 3, 2024 at 2:53:55 PM
Vector type: XSS
Template used:
<iframe srcdoc="$[data1]" id=x></iframe>
Code used after fuzz:
if(x.srcdoc.includes(">"))log('$[data1]')
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
<iframe srcdoc=">" id=x></iframe>
<iframe srcdoc=">" id=x></iframe>
<iframe srcdoc=">⃒" id=x></iframe>
Fuzz results
Safari 17.5 mobile iOS 17.5.1
Found 3 results
Data |
---|
> |
Data |
---|
> |
Data |
---|
>⃒ |