News for hackers. Stuff that matters.

A comment on Google's XSS game. Parent comment

Re:Google's XSS game by gibybo on Thursday May 29, 2014 @07:08AM (#7815648)
I used "//" to get around the http regex (but this requires using an https host as you mentioned), is there another way to get around the regex?
[ Parent | on HN ]
Re:Google's XSS game by tautvidas on Thursday May 29, 2014 @07:45AM (#7815716)
Adding a space just before the URL works just as well.
[ Parent | on HN ]
Re:Google's XSS game by yen223 on Thursday May 29, 2014 @07:15AM (#7815660)
Spoiler: RaNDoM cApS
[ Parent | on HN ]
Re:Google's XSS game by _august on Thursday May 29, 2014 @07:52AM (#7815731)
//www.google.com/jsapi?callback=alert
[ Parent | on HN ]
Re:Google's XSS game by gpvos on Thursday May 29, 2014 @08:47AM (#7815932)
data:,alert('hi')
[ Parent | on HN ]
Re:Google's XSS game by jonaspf on Thursday May 29, 2014 @07:16AM (#7815666)
Use upper-case characters
[ Parent | on HN ]
Re:Google's XSS game by vsakos on Thursday May 29, 2014 @07:26AM (#7815685)
i think ftp:// works too

EDIT: no, it doesn't :D

[ Parent | on HN ]