Entities that convert to greater than in a iframe srcdoc

3

3

3

This shows which entities convert to the greater than character inside a iframe srcdoc. Inspired by: https://x.com/therceman/status/1803666353892585642

Created on: Thursday, August 1, 2024 at 5:39:17 PM

Updated on: Thursday, December 12, 2024 at 1:27:03 PM

Vector type: XSS

Vector charset: UTF-8

<iframe srcdoc="$[data1]" id=x></iframe>

if(x.srcdoc.includes(">"))log('$[data1]')