News for hackers. Stuff that matters.

A comment on Google's XSS game. Parent comment

Re:Google's XSS game by adricnet on Thursday May 29, 2014 @09:33PM (#7819667)
The callback in the hints didn't work for me in the game, but the other suggestions here are working and quite eye opening ...

That this works is really scary if not fully surprising: data:text/javascript;base64,YWxlcnQoMTMzNyk=

Thanks jehna1 , sebslomski , all!

[ Parent | on HN ]
Re:Google's XSS game by juliann on Thursday May 29, 2014 @09:56PM (#7819735)
it works, you just gotta use it like google.com/jsapi?callback=alert
[ Parent | on HN ]