News for hackers. Stuff that matters.

A comment on Google's XSS game. Parent comment

Re:Google's XSS game by namanaggarwal on Thursday May 29, 2014 @09:20AM (#7816057)
still not able to get :-(
[ Parent | on HN ]
Re:Google's XSS game by sourthyme on Thursday May 29, 2014 @10:06AM (#7816251)
Use the text input instead of the url.
[ Parent | on HN ]
Re:Google's XSS game by erid on Thursday May 29, 2014 @11:39AM (#7816772)
You could use %2b instead of + on the URL and it'll work, or just * as mentioned above.
[ Parent | on HN ]
Re:Google's XSS game by voxtex on Thursday May 29, 2014 @10:55AM (#7816509)
' + alert() + '

worked for me.

[ Parent | on HN ]
Re:Google's XSS game by codeman123 on Thursday May 29, 2014 @09:31AM (#7816098)
can't solve it either :-/
[ Parent | on HN ]