News for hackers. Stuff that matters.

A comment on Google's XSS game. Parent comment

Re:Google's XSS game by trias on Thursday May 29, 2014 @07:28AM (#7815687)
data-uris also work: #data:text/javascript,alert('pwn')
[ Parent | on HN ]
Re:Google's XSS game by aidos on Thursday May 29, 2014 @08:24AM (#7815844)
That's what I used too. Hosting scripts is far too much like hard work...
[ Parent | on HN ]