News for hackers. Stuff that matters.

A comment on The XSS Game by Google. Parent comment

Re:The XSS Game by Google by n_ on Wednesday November 23, 2016 @05:34PM (#13026342)
On level 3:

  https://xss-game.appspot.com/level3/frame#'/><script>alert(1)</script>
will execute on load rather than after user input.
[ Parent | on HN ]
Re:The XSS Game by Google by maaarghk on Wednesday November 23, 2016 @06:08PM (#13026530)
yeah, as the notes say you would use onload IRL.
[ Parent | on HN ]