News for hackers. Stuff that matters.

A comment on The XSS Game by Google. Parent comment

Re:The XSS Game by Google by joshstrange on Wednesday November 23, 2016 @02:31PM (#13025133)
> Cool, you can store a whole website in a URL now.

As long as it's shorter than ~2000 characters [0]

[0] http://stackoverflow.com/questions/417142/what-is-the-maximu...

[ Parent | on HN ]
Re:The XSS Game by Google by chadscira on Wednesday November 23, 2016 @06:06PM (#13026514)
Seems like in chrome you can go much higher!

Here is a example of 5M

    data:text/html,<script>window.location='data:text/html,<!--'+new Array(5000001).join('a')+'!--><script>document.documentElement.innerHTML=window.location.protocol+\':\'+String(window.location).length;</'+'script>';</script>
I tried 110Mb and it actually worked as well! I'm not sure about the real limit.

You can store MASSIVE amounts of data in these things. It also seems to eventually break the url display and reverts to about:blank. It still retains protocol integrity though.

[ Parent | on HN ]