Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on The XSS Game by Google. Parent comment
#1 <script>alert()</script> (no need for an empty string)
#4 '+alert()+'
#6 you can also use a protocol-relative url //google.com/jsapi?callback=alert
There are no comments on this comment yet.
#1 <script>alert()</script> (no need for an empty string)
#4 '+alert()+'
#6 you can also use a protocol-relative url //google.com/jsapi?callback=alert